32 lines
1.5 KiB
Plaintext
32 lines
1.5 KiB
Plaintext
 
|
# Example of the per-environment secrets tfvars for "mvm-s3".
|
||
|
|
#
|
||
|
|
# Copy this file to mvm-s3.secrets.tfvars (gitignored - see .gitignore,
|
||
|
|
# pattern *.secrets.tfvars) and fill in real values. Unlike the old
|
||
|
|
# *.auto.tfvars convention, this file is NOT auto-loaded by Terraform - pass
|
||
|
|
# it explicitly with -var-file so it can never accidentally merge with
|
||
|
|
# another environment's creds:
|
||
|
|
#
|
||
|
|
# terraform workspace select mvm-s3
|
||
|
|
# terraform apply -var-file=terraform.tfvars -var-file=mvm-s3.tfvars -var-file=mvm-s3.secrets.tfvars
|
||
|
|
#
|
||
|
|
# Mapping from an OpenStack-style openrc.sh:
|
||
|
|
# OS_AUTH_URL -> auth_url
|
||
|
|
# OS_USERNAME -> username
|
||
|
|
# OS_PASSWORD -> password
|
||
|
|
# OS_PROJECT_ID -> project_id
|
||
|
|
# OS_REGION_NAME -> region
|
||
|
|
# OS_USER_DOMAIN_NAME -> user_domain_name
|
||
|
|
|
||
|
|
auth_url = "https://infra.mail.ru:35357/v3/"
|
||
|
|
username = "<real username for the mvm-s3 project>"
|
||
|
|
password = "<real password - never commit this>"
|
||
|
|
project_id = "<mvm-s3 project_id>"
|
||
|
|
region = "RegionOne"
|
||
|
|
user_domain_name = "users"
|
||
|
|
|
||
|
|
# Optional: Nova keypairs are per-user, not per-project - a keypair uploaded
|
||
|
|
# under a different account is invisible to whichever account deploys here.
|
||
|
|
# Set this to have Terraform register var.ssh_key_name (see mvm-s3.tfvars)
|
||
|
|
# under the deploying account from this public key. Leave unset if a keypair
|
||
|
|
# with that name already exists under the deploying account.
|
||
|
|
# ssh_public_key = "ssh-ed25519 AAAA... or ssh-rsa AAAA... your-public-key-content"
|