Michael Li
333b9e855d
* chore(e2e): Use public version of enos * chore(e2e): Move vault module to this repo terraform-enos-aws-vault is no longer supported
79 lines
2.1 KiB
Terraform
79 lines
2.1 KiB
Terraform
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
output "instance_ids" {
|
|
description = "IDs of Vault instances"
|
|
value = [for instance in aws_instance.vault_instance : instance.id]
|
|
}
|
|
|
|
output "instance_public_ips" {
|
|
description = "Public IPs of Vault instances"
|
|
value = [for instance in aws_instance.vault_instance : instance.public_ip]
|
|
}
|
|
|
|
output "instance_private_ips" {
|
|
description = "Private IPs of Vault instances"
|
|
value = [for instance in aws_instance.vault_instance : instance.private_ip]
|
|
}
|
|
|
|
output "key_id" {
|
|
value = data.aws_kms_key.kms_key.id
|
|
}
|
|
|
|
output "vault_instances" {
|
|
description = "The vault cluster instances that were created"
|
|
|
|
value = {
|
|
for instance in aws_instance.vault_instance : instance.id => {
|
|
public_ip = instance.public_ip
|
|
private_ip = instance.private_ip
|
|
}
|
|
}
|
|
}
|
|
|
|
output "vault_root_token" {
|
|
value = coalesce(var.vault_root_token, try(enos_vault_init.leader[0].root_token, null), "none")
|
|
}
|
|
|
|
output "vault_unseal_keys_b64" {
|
|
value = try(enos_vault_init.leader[0].unseal_keys_b64, [])
|
|
}
|
|
|
|
output "vault_unseal_keys_hex" {
|
|
value = try(enos_vault_init.leader[0].unseal_keys_hex, null)
|
|
}
|
|
|
|
output "vault_unseal_shares" {
|
|
value = try(enos_vault_init.leader[0].unseal_keys_shares, -1)
|
|
}
|
|
|
|
output "vault_unseal_threshold" {
|
|
value = try(enos_vault_init.leader[0].unseal_keys_threshold, -1)
|
|
}
|
|
|
|
output "vault_recovery_keys_b64" {
|
|
value = try(enos_vault_init.leader[0].recovery_keys_b64, [])
|
|
}
|
|
|
|
output "vault_recovery_keys_hex" {
|
|
value = try(enos_vault_init.leader[0].recovery_keys_hex, [])
|
|
}
|
|
|
|
output "vault_recovery_key_shares" {
|
|
value = try(enos_vault_init.leader[0].recovery_keys_shares, -1)
|
|
}
|
|
|
|
output "vault_recovery_threshold" {
|
|
value = try(enos_vault_init.leader[0].recovery_keys_threshold, -1)
|
|
}
|
|
|
|
output "vault_cluster_tag" {
|
|
description = "Cluster tag for Vault cluster"
|
|
value = local.vault_cluster_tag
|
|
}
|
|
|
|
output "audit_device_log_file_path" {
|
|
description = "The path of the file audit device path, if enabled"
|
|
value = var.enable_file_audit_device ? local.audit_device_file_path : "no audit devices enabled"
|
|
}
|