Keycloak resources in production.

openstack-tf/d4s-production/keycloak/main.tf

@@ -0,0 +1,48 @@
+# Define required providers
+terraform {
+  required_version = ">= 0.14.0"
+  required_providers {
+    openstack = {
+      source  = "terraform-provider-openstack/openstack"
+      version = ">= 1.53.0"
+    }
+  }
+}
+
+data "terraform_remote_state" "privnet_dns_router" {
+  backend = "local"
+
+  config = {
+    path = "../project-setup/terraform.tfstate"
+  }
+}
+
+#
+# Uses common_variables as module
+#
+module "common_variables" {
+  source = "../../modules/common_variables"
+}
+
+module "keycloak" {
+  source = "../../modules/keycloak"
+
+  keycloak_data = {
+    affinity_policy   = "soft-anti-affinity"
+    srv_name          = "keycloak-prod"
+    vm_count          = 2
+    vm_flavor         = "m1.medium"
+    boot_vol_size     = 10
+    share_description = "NFS share for the keycloak production static data"
+    share_name        = "keycloak_production_nfs_share"
+  }
+
+  keycloak_recordsets = {
+    keycloak_main_record = {
+      name        = join(".", ["accounts", data.terraform_remote_state.privnet_dns_router.outputs.dns_zone.zone_name]),
+      description = "Keycloak production endpoint"
+    }
+  }
+
+  keycloak_object_store = "keycloak-data-prod"
+}

openstack-tf/d4s-production/keycloak/outputs.tf

@@ -0,0 +1,21 @@
+output "keycloak_data" {
+  value = module.keycloak.keycloak_data
+}
+
+output "keycloak_recordsets" {
+  value = module.keycloak.keycloak_recordsets
+}
+
+output "keycloak_nfs_port_data" {
+  value = module.keycloak.nfs_port_data
+}
+
+output "keycloak_nfs_volume_data" {
+  value = module.keycloak.keycloak_nfs_volume_data
+}
+
+output "keycloak_nfs_volume_acls" {
+  value     = module.keycloak.keycloak_nfs_volume_acls
+  sensitive = true
+}
+

openstack-tf/d4s-production/keycloak/provider.tf

@@ -0,0 +1,3 @@
+provider "openstack" {
+  cloud = "d4s-production"
+}