107 lines
4.3 KiB
HCL
107 lines
4.3 KiB
HCL
locals {
|
|
pg_vars = merge([for pg in var.pg: {
|
|
join("_",["LABEL_pg", pg.namespace, pg.name, pg.dbname]) = join(" | ",["pg", pg.namespace, pg.name, pg.dbname])
|
|
join("_",["ENGINE_pg", pg.namespace, pg.name, pg.dbname]) = "postgres@dbgate-plugin-postgres"
|
|
join("_",["SERVER_pg", pg.namespace, pg.name, pg.dbname]) = join(".",["${pg.name}-rw", pg.namespace, "svc"])
|
|
join("_",["PORT_pg", pg.namespace, pg.name, pg.dbname]) = "5432"
|
|
join("_",["DATABASE_pg", pg.namespace, pg.name, pg.dbname]) = pg.dbname
|
|
join("_",["USER_pg", pg.namespace, pg.name, pg.dbname]) = pg.username
|
|
}]...)
|
|
pg_secrets = merge([for index, pg in var.pg: {
|
|
join("_",["PASSWORD_pg", pg.namespace, pg.name, pg.dbname]) = data.kubernetes_secret_v1.pgs[index].data[var.pg[index].secret.key]
|
|
}]...)
|
|
pg_conns = [for pg in var.pg: join("_",["pg", pg.namespace, pg.name, pg.dbname])]
|
|
|
|
maria_vars = merge([for m in var.maria: {
|
|
join("_",["LABEL_maria", m.namespace, m.name]) = join(" | ",["maria", m.namespace, m.name])
|
|
join("_",["ENGINE_maria", m.namespace, m.name]) = "mysql@dbgate-plugin-mysql"
|
|
join("_",["SERVER_maria", m.namespace, m.name]) = join(".",["${m.name}-svc", m.namespace, "svc"])
|
|
join("_",["PORT_maria", m.namespace, m.name]) = "3306"
|
|
join("_",["DATABASE_maria", m.namespace, m.name]) = m.dbname
|
|
join("_",["USER_maria", m.namespace, m.name]) = m.username
|
|
}]...)
|
|
maria_secrets = merge([for index, m in var.maria: {
|
|
join("_",["PASSWORD_maria", m.namespace, m.name]) = "unimplemented"
|
|
}]...)
|
|
maria_conns = [for m in var.maria: join("_",["maria", m.namespace, m.name])]
|
|
|
|
mongo_vars = merge([for m in var.mongo: {
|
|
join("_",["LABEL_mongo", m.namespace, m.name]) = join(" | ",["mongo", m.namespace, m.name])
|
|
join("_",["ENGINE_mongo", m.namespace, m.name]) = "mongo@dbgate-plugin-mongo"
|
|
join("_",["SERVER_mongo", m.namespace, m.name]) = join(".",["${m.name}-svc", m.namespace, "svc"])
|
|
join("_",["PORT_mongo", m.namespace, m.name]) = "3306"
|
|
join("_",["DATABASE_mongo", m.namespace, m.name]) = m.dbname
|
|
join("_",["USER_mongo", m.namespace, m.name]) = m.username
|
|
}]...)
|
|
mongo_secrets = merge([for index, m in var.mongo: {
|
|
join("_",["PASSWORD_mongo", m.namespace, m.name]) = data.kubernetes_secret_v1.mongos[index].data[var.mongo[index].secret.key]
|
|
}]...)
|
|
mongo_conns = [for m in var.mongo: join("_",["mongo", m.namespace, m.name])]
|
|
oauth_config = {
|
|
"OAUTH_AUTH" = "https://${data.kubernetes_ingress_v1.authentik.spec[0].rule[0].host}/application/o/authorize/"
|
|
"OAUTH_TOKEN" = "https://${data.kubernetes_ingress_v1.authentik.spec[0].rule[0].host}/application/o/token/"
|
|
"OAUTH_LOGOUT" = "https://${data.kubernetes_ingress_v1.authentik.spec[0].rule[0].host}/application/o/${var.component}-${var.instance}/end-session/"
|
|
"OAUTH_LOGIN_FIELD" = "nickname"
|
|
"OAUTH_SCOPE" = "email"
|
|
}
|
|
|
|
|
|
connections = join(",",concat(local.pg_conns, local.maria_conns, local.mongo_conns))
|
|
connection_vars = merge(local.pg_vars, local.maria_vars, local.mongo_vars)
|
|
connection_secrets = merge(local.pg_secrets,local.mongo_secrets)
|
|
}
|
|
|
|
resource "kubectl_manifest" "dbgate-config" {
|
|
yaml_body = <<-EOF
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: "${var.component}-${var.instance}"
|
|
namespace: "${var.namespace}"
|
|
labels: ${jsonencode(local.common-labels)}
|
|
data: ${jsonencode(merge(local.oauth_config, local.connection_vars))}
|
|
EOF
|
|
}
|
|
|
|
resource "kubernetes_secret_v1" "dbgate-config-secret" {
|
|
metadata {
|
|
name = "${var.component}-${var.instance}"
|
|
namespace = var.namespace
|
|
}
|
|
data = local.connection_secrets
|
|
}
|
|
|
|
|
|
data "kubernetes_secret_v1" "pgs" {
|
|
count = length(var.pg)
|
|
metadata {
|
|
name = "${var.pg[count.index].secret.name}"
|
|
namespace = "${var.pg[count.index].namespace}"
|
|
}
|
|
}
|
|
|
|
data "kubernetes_secret_v1" "mongos" {
|
|
count = length(var.mongo)
|
|
metadata {
|
|
name = "${var.mongo[count.index].secret.name}"
|
|
namespace = "${var.mongo[count.index].namespace}"
|
|
}
|
|
}
|
|
|
|
|
|
locals {
|
|
request_headers = {
|
|
"Content-Type" = "application/json"
|
|
Authorization = "Bearer ${local.authentik-token}"
|
|
}
|
|
}
|
|
provider "restapi" {
|
|
uri = "http://authentik.${var.domain}-auth.svc/api/v3/"
|
|
headers = local.request_headers
|
|
create_method = "PATCH"
|
|
update_method = "PATCH"
|
|
destroy_method = "PATCH"
|
|
write_returns_object = true
|
|
id_attribute = "name"
|
|
}
|