Common Terraform Modules for Open Telekom Cloud

These are commonly usable Terraform Modules for the Open Telekom Cloud based on the awesome Terraform OTC Provider.

These modules are developed by iits-consulting - your Cloud-Native Innovation Teams as a Service!

Usage:

You pick modules which would like to use like this:

module "vpc" {
   source     = "registry.terraform.io/iits-consulting/project-factory/opentelekomcloud//modules/vpc"
   version    = "4.1.7"
   name       = "myproject-dev-vpc"
   cidr_block = "192.168.0.0/16"
   subnets = {
      "myproject-dev-subnet" = cidrsubnet("192.168.0.0/16", 1, 0)
   }
}

Currently Available Modules

ACME: Create, sign and update HTTPS certificates via OTC DNS
CCE: A module designed to support full capabilities of OTC CCE while simplifying the configuration for ease of use.
cloud_tracing_service: This module enables the Cloud Tracing functionality in the OTC.
jumphost: A module designed to create SSH jumphosts via OTC ECS for private networks.
loadbalancer: Module for creating an OTC ELB resource with public EIP
obs_secrets_reader: This modules reads JSON formatted secrets from an OBS bucket.
obs_secrets_writer: This modules creates an OBS Bucket with KMS SSE default encryption and a JSON encoded secrets file within the bucket.
private_dns: Create and manage a private DNS zone within you VPC
rds: A module designed to support full capabilities of OTC RDS while simplifying the configuration for ease of use.
snat: Public SNAT gateway to grant internet access from a VPC without shared SNAT.
waf: Create Web Application Firewall for a Domain
keycloak_sso: Connects Keycloak with OTC SAML IDP

Quickstart

As a quick start we recommend using this template:

https://github.com/iits-consulting/otc-terraform-template

Then just adjust the set-env.sh and the showcase/dev/main.tf as you wish

Common Concepts behind the modules

There are some variables that occur on multiple modules. The ideas behind them are explained here.

Variable	Description	Example
`context`	A human-readable name of the project	`website`, `payments-service`
`stage`	Name of the environment	`dev`, `test`, `qa`, `prod`

Recommendations

We recommend this kind of Terraform folder structure:
Set up a secure remote Terraform state . Copy the backend output of that module to your settings.tf file
Use https://github.com/iits-consulting/otc-infrastructure-charts-template if you want to use ArgoCD (GitOps)