48 lines
1.4 KiB
HCL
Executable File
48 lines
1.4 KiB
HCL
Executable File
resource "tls_private_key" "master_ssh_key" {
|
|
algorithm = "RSA"
|
|
rsa_bits = 4096
|
|
}
|
|
|
|
resource "oci_vault_secret" "sei_oci_vault_secret_private_key" {
|
|
compartment_id = var.ocid_compartment_security
|
|
vault_id = oci_kms_vault.vault-sei.id
|
|
key_id = oci_kms_key.sei-vault-keys.id
|
|
secret_name = "master-private-ssh-key"
|
|
secret_content {
|
|
content_type = "BASE64"
|
|
content = base64encode(tls_private_key.master_ssh_key.private_key_openssh)
|
|
}
|
|
}
|
|
|
|
resource "oci_vault_secret" "sei_oci_vault_secret_pulbic_key" {
|
|
compartment_id = var.ocid_compartment_security
|
|
vault_id = oci_kms_vault.vault-sei.id
|
|
key_id = oci_kms_key.sei-vault-keys.id
|
|
secret_name = "master-public-ssh-key"
|
|
secret_content {
|
|
content_type = "BASE64"
|
|
content = base64encode(tls_private_key.master_ssh_key.public_key_openssh)
|
|
}
|
|
}
|
|
|
|
resource "random_password" "password_mysql_admin" {
|
|
length = 16
|
|
min_numeric = 1
|
|
min_upper = 1
|
|
min_lower = 1
|
|
min_special = 1
|
|
override_special = "_#-"
|
|
}
|
|
|
|
resource "oci_vault_secret" "sei_oci_vault_secret_mysql" {
|
|
compartment_id = var.ocid_compartment_security
|
|
vault_id = oci_kms_vault.vault-sei.id
|
|
key_id = oci_kms_key.sei-vault-keys.id
|
|
secret_name = "master-mysql-password"
|
|
secret_content {
|
|
content_type = "BASE64"
|
|
content = base64encode(random_password.password_mysql_admin.result)
|
|
}
|
|
}
|
|
|