about summary refs log tree commit diff
path: root/ops
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2021-12-27T14·23+0300
committertazjin <mail@tazj.in>2021-12-27T15·53+0000
commit98be390576c4cd68f7bf879bcae2695a3b0917ba (patch)
tree5e72e924002962873a4eb23aba4becfe84a3e570 /ops
parente616f978d045ccbe62eee6403e0d93061982ae23 (diff)
fix(ops/keycloak): Move Terraform state to GleSYS bucket r/3471
This should never sit around locally the way it does now.

Change-Id: Icfbdaf1949d6d948a796a0759282ea6144af3621
Reviewed-on: https://cl.tvl.fyi/c/depot/+/4709
Tested-by: BuildkiteCI
Reviewed-by: grfn <grfn@gws.fyi>
Diffstat (limited to 'ops')
-rw-r--r--ops/keycloak/main.tf11
-rw-r--r--ops/secrets/tf-keycloak.age25
2 files changed, 24 insertions, 12 deletions
diff --git a/ops/keycloak/main.tf b/ops/keycloak/main.tf
index ec44507ec64b..f7dc0f27d132 100644
--- a/ops/keycloak/main.tf
+++ b/ops/keycloak/main.tf
@@ -8,6 +8,17 @@ terraform {
       source = "mrparkers/keycloak"
     }
   }
+
+  backend "s3" {
+    endpoint = "https://objects.dc-sto1.glesys.net"
+    bucket   = "tvl-state"
+    key      = "terraform/tvl-keycloak"
+    region   = "glesys"
+
+    skip_credentials_validation = true
+    skip_region_validation      = true
+    skip_metadata_api_check     = true
+  }
 }
 
 provider "keycloak" {
diff --git a/ops/secrets/tf-keycloak.age b/ops/secrets/tf-keycloak.age
index ee0bcb679c0d..ddc477b21a18 100644
--- a/ops/secrets/tf-keycloak.age
+++ b/ops/secrets/tf-keycloak.age
@@ -1,13 +1,14 @@
 age-encryption.org/v1
--> ssh-ed25519 dcsaLw CRX6a8zfz3BaDYhwrBPXBgEn/o0WuS6UdvA55wYNTBc
-/5gTObQ8770g8kIxCQyQj8hOh+1dkOu5DW1sz33eiy8
--> ssh-ed25519 CpJBgQ 1/oDGaLOKblznS/ciKQ0g7Jdfg1KtEKWugjE9o9n1jo
-A5wcsx6NXQpjKR8Y9jlM4JN34IUi3T4UuTIOtmOHwcs
--> ssh-ed25519 aXKGcg pYkMVxIGv408998UFzNQZvCQqBNPOSx+fvMs9FGd2nc
-Ue1rNrARXo0/Fq0qazNo+5a4zc7JBLdEgrqUowOEOBg
--> ssh-ed25519 OkGqLg iLVc9k937aMAyl82TFsmDeX46PSrjQ6QpEzU0BcrNHg
-NzZYEXjz4mwafayIIvGxcE0cLhhUZuzh5loyfIZzl+0
--> `^*"*qb-grease r`; Fwf.0CJ+
-5qQRDetp1IFec1AkHd17faslyU+7OHDiTmwoSJGZZPWrdiY
---- uguIPraC7NNVfyDIWoTVjiunofaRYY8xeLipwZuU0iQ
-fE''Ɇ%:'%U3aU4.tm.qW	*Zip
zg=v{cXo!-Li5	L2	@AA
\ No newline at end of file
+-> ssh-ed25519 dcsaLw gvGXpwn8HNlihpVLJYZjYXhG/4BZEYl+0K1Ssa2AxQ8
+NPUvQBTbB3SeXVn8UZ2F0Plf4/JcFWlqY8+GYou1juY
+-> ssh-ed25519 CpJBgQ eg5lnSlBt+dB+shFKK2f+NRgoHTPLxhQkj+Mzfb4yQ4
+KQ1vgSElo+WWHz8JeyxLNbPGGPyV9yRZjxvepzZvsLY
+-> ssh-ed25519 aXKGcg EASpT9L2vhGCK4Vv8wupTl2/RQROrhuQGqTQT1X2y3Y
+cqyOSnmyJ63UmPO8ck/aeGq5LaoJjBAnshNl8582m4c
+-> ssh-ed25519 OkGqLg wcYKXhHD3NJCFZhPxouufaj8pNzyUlXYfaUMZ8A7Y2o
+kQOH5xBYg0BWI3s8glbSe7cSW0ExV+UPi8XCJKPcO1g
+-> 1OJ-grease m&\ `{=h?y l;&SteqI
+Wr+SeswiW4qeYWkZaZFJzp1dmmU6iDPCapV+DVuY0HMmfIBE2nPcqN4RbiwYYWJj
+Syth+aJoaxZCweA
+--- uiwC00V7k3Bf0e0ie6q/MZzVRCr4EGZFi2XBOpOiG8k
+Yha[AwˆPiIxuYނ1䀒w^qZWZE(Ҩ'|/tKS-$Yy_V7ð7ڷLP%f4[{+ҏWfws]e74O_8lE;}+BQodܨ:`?'k@õ8l}l1oGdBXh*vof?T
\ No newline at end of file