devops-adeel

locals {
  vault_url = "https://vault.com"
}

resource "okta_user" "default" {
  first_name = "John"
  last_name  = "Smith"
  login      = "example@example.com"
  email      = "example@example.com"
}

devops-adeel

resource "boundary_scope" "default" {
  name                     = "organization_one"
  description              = "My first scope!"
  scope_id                 = "global"
  auto_create_admin_role   = true
  auto_create_default_role = true
}

resource "boundary_auth_method_oidc" "default" {
  scope_id = boundary_scope.default.id

devops-adeel

resource "aws_organizations_account" "default" {
  name  = "my_new_account"
  email = "john@doe.org"
}

data "aws_billing_service_account" "default" {}

resource "aws_iam_user" "default" {
  name = "vault-aws-auth-user"
}

devops-adeel

locals {
  boundary_creds_path = format(
    "%s/creds/%s",
    vault_mount.default.path,
    vault_database_secret_backend_role.default.name
  )
}

resource "boundary_credential_library_vault" "default" {
  name                = google_sql_database_instance.default.name

devops-adeel

resource "random_uuid" "default" {}

resource "random_pet" "default" {}

resource "random_password" "default" {
  length           = 16
  special          = true
  override_special = "!#$%&*()-_=+[]{}<>:?"
}

devops-adeel

data "aws_billing_service_account" "default" {}

resource "aws_iam_user" "default" {
  name = "vault-aws-auth-user"
}

resource "aws_iam_access_key" "default" {
  user = aws_iam_user.default.name
}

devops-adeel

data "okta_group" "default" {
  name = var.group_name
}

resource "vault_identity_group" "default" {
  name              = data.okta_group.default.name
  type              = "external"
  external_policies = true
}

devops-adeel

data "aws_iam_policy_document" "default" {
  version = "2012-10-17"

  statement {
    sid     = "FederatedTrustVaultOIDC"
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity", ]

    principals {
      type        = "Federated"

devops-adeel

locals {
  engine = [
    "secret",
    "oracle",
    "postgres",
    "mysql"
  ]
}

data "vault_policy_document" "read" {

devops-adeel

/**
 * Usage:
 *
 * ```hcl
 *
 * module "github_repo" {
 *   source           = "hashicorp/github_terraform_module"
 *   application_name = "foo"
 *   tfc_token        = vault_terraform_cloud_secret_creds.default.token
 * }