Adeel Ahmad devops-adeel

## cicd_admin.tf
locals {
  member_entity_ids = var.entity_ids
}

data "vault_policy_document" "default" {
  rule {
    path         = "sys/namespaces/"
    capabilities = ["list"]
    description  = "List namespaces in root"
  }

## vault_aws_auth.tf
resource "aws_iam_access_key" "default" {
  user = var.user
}

resource "vault_auth_backend" "default" {
  type = "aws"
}

resource "vault_aws_auth_backend_client" "default" {
  backend    = vault_auth_backend.default.path

## auth0_app.tf
locals {
  oidc_app = "hashicorp-vault-app"
}

data "auth0_tenant" "default" {}

resource "auth0_connection" "default" {
  name     = local.oidc_app
  strategy = "auth0"
}

## vault_dr_acl.tf
locals {
  role_name = "failover-handler"
}

data "vault_policy_document" "default" {
  rule {
    path         = "sys/replication/dr/secondary/promote"
    capabilities = ["update"]
    description  = "Create and manage ACL policies"
  }

## gcp_config.tf
variable "approle_id" {}
variable "approle_secret" {}

provider "vault" {
  auth_login {
    namespace = "admin/terraform-vault-secrets-gcp"
    path = "auth/approle/login"

    parameters = {
      role_id   = var.approle_id

## github_module.tf
/**
 * Usage:
 *
 * ```hcl
 *
 * module "github_repo" {
 *   source           = "hashicorp/github_terraform_module"
 *   application_name = "foo"
 *   tfc_token        = vault_terraform_cloud_secret_creds.default.token
 * }

## acl_policies.tf
locals {
  engine = [
    "secret",
    "oracle",
    "postgres",
    "mysql"
  ]
}

data "vault_policy_document" "read" {

## aws_iam_federated.tf
data "aws_iam_policy_document" "default" {
  version = "2012-10-17"

  statement {
    sid     = "FederatedTrustVaultOIDC"
    effect  = "Allow"
    actions = ["sts:AssumeRoleWithWebIdentity", ]

    principals {
      type        = "Federated"

## groups.tf
data "okta_group" "default" {
  name = var.group_name
}

resource "vault_identity_group" "default" {
  name              = data.okta_group.default.name
  type              = "external"
  external_policies = true
}

## aws_auth.tf
data "aws_billing_service_account" "default" {}

resource "aws_iam_user" "default" {
  name = "vault-aws-auth-user"
}

resource "aws_iam_access_key" "default" {
  user = aws_iam_user.default.name
}
	locals {
	member_entity_ids = var.entity_ids
	}

	data "vault_policy_document" "default" {
	rule {
	path = "sys/namespaces/"
	capabilities = ["list"]
	description = "List namespaces in root"
	}
	resource "aws_iam_access_key" "default" {
	user = var.user
	}

	resource "vault_auth_backend" "default" {
	type = "aws"
	}

	resource "vault_aws_auth_backend_client" "default" {
	backend = vault_auth_backend.default.path
	locals {
	oidc_app = "hashicorp-vault-app"
	}

	data "auth0_tenant" "default" {}

	resource "auth0_connection" "default" {
	name = local.oidc_app
	strategy = "auth0"
	}
	locals {
	role_name = "failover-handler"
	}

	data "vault_policy_document" "default" {
	rule {
	path = "sys/replication/dr/secondary/promote"
	capabilities = ["update"]
	description = "Create and manage ACL policies"
	}
	variable "approle_id" {}
	variable "approle_secret" {}

	provider "vault" {
	auth_login {
	namespace = "admin/terraform-vault-secrets-gcp"
	path = "auth/approle/login"

	parameters = {
	role_id = var.approle_id
	/**
	* Usage:
	*
	* ```hcl
	*
	* module "github_repo" {
	* source = "hashicorp/github_terraform_module"
	* application_name = "foo"
	* tfc_token = vault_terraform_cloud_secret_creds.default.token
	* }
	locals {
	engine = [
	"secret",
	"oracle",
	"postgres",
	"mysql"
	]
	}

	data "vault_policy_document" "read" {
	data "aws_iam_policy_document" "default" {
	version = "2012-10-17"

	statement {
	sid = "FederatedTrustVaultOIDC"
	effect = "Allow"
	actions = ["sts:AssumeRoleWithWebIdentity", ]

	principals {
	type = "Federated"
	data "okta_group" "default" {
	name = var.group_name
	}

	resource "vault_identity_group" "default" {
	name = data.okta_group.default.name
	type = "external"
	external_policies = true
	}
	data "aws_billing_service_account" "default" {}

	resource "aws_iam_user" "default" {
	name = "vault-aws-auth-user"
	}

	resource "aws_iam_access_key" "default" {
	user = aws_iam_user.default.name
	}