feat: saisie des logins pour accéder au vault
This commit is contained in:
@@ -10,3 +10,19 @@ module "k3s" {
|
|||||||
k3s_disable_components = var.k3s_disable_components
|
k3s_disable_components = var.k3s_disable_components
|
||||||
kubeconfig_output_path = var.kubeconfig_output_path
|
kubeconfig_output_path = var.kubeconfig_output_path
|
||||||
}
|
}
|
||||||
|
|
||||||
|
provider "vault" {
|
||||||
|
# Adresse du serveur Vault (dev)
|
||||||
|
address = "https://10.101.200.37:8200"
|
||||||
|
|
||||||
|
# Auth par userpass
|
||||||
|
auth_login {
|
||||||
|
path = "auth/userpass/login/${var.vault_username}"
|
||||||
|
parameters = {
|
||||||
|
login = var.vault_username
|
||||||
|
password = var.vault_password
|
||||||
|
}
|
||||||
|
}
|
||||||
|
# Skip verify pour dev uniquement (pas en prod!)
|
||||||
|
# skip_client_verification = true
|
||||||
|
}
|
||||||
@@ -76,3 +76,15 @@ variable "deployment_environment" {
|
|||||||
error_message = "L'environnement doit être dev, rec ou prod."
|
error_message = "L'environnement doit être dev, rec ou prod."
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
|
variable "vault_username" {
|
||||||
|
description = "Username Vault"
|
||||||
|
type = string
|
||||||
|
sensitive = false
|
||||||
|
}
|
||||||
|
|
||||||
|
variable "vault_password" {
|
||||||
|
description = "Password Vault"
|
||||||
|
type = string
|
||||||
|
sensitive = true
|
||||||
|
}
|
||||||
|
|||||||
Reference in New Issue
Block a user