fix(ops/keycloak): Move Terraform state to GleSYS bucket r/3471

This should never sit around locally the way it does now.

Change-Id: Icfbdaf1949d6d948a796a0759282ea6144af3621
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4709
Tested-by: BuildkiteCI
Reviewed-by: grfn <grfn@gws.fyi>

1 files changed, 11 insertions, 0 deletions

diff --git a/ops/keycloak/main.tf b/ops/keycloak/main.tf
index ec44507ec64b..f7dc0f27d132 100644
--- a/ops/keycloak/main.tf
+++ b/ops/keycloak/main.tf
@@ -8,6 +8,17 @@ terraform {
       source = "mrparkers/keycloak"
     }
   }
+
+  backend "s3" {
+    endpoint = "https://objects.dc-sto1.glesys.net"
+    bucket   = "tvl-state"
+    key      = "terraform/tvl-keycloak"
+    region   = "glesys"
+
+    skip_credentials_validation = true
+    skip_region_validation      = true
+    skip_metadata_api_check     = true
+  }
 }
 
 provider "keycloak" {