Skip to content

Commit

Permalink
feat: remove vault resources from alb (#238)
Browse files Browse the repository at this point in the history
  • Loading branch information
mtweeman authored Nov 7, 2024
1 parent de3e9bb commit 29398d7
Show file tree
Hide file tree
Showing 4 changed files with 0 additions and 111 deletions.
34 changes: 0 additions & 34 deletions components/terraform/alb/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -9,19 +9,6 @@ resource "oci_load_balancer_backend_set" "internal" {
}
}

resource "oci_load_balancer_backend_set" "vault" {
name = "vault"
load_balancer_id = oci_load_balancer_load_balancer.internal.id
policy = "ROUND_ROBIN"

health_checker {
port = 8200
protocol = "HTTP"
return_code = 200
url_path = "/sys/health"
}
}

resource "oci_load_balancer_listener" "internal" {
name = "internal"
load_balancer_id = oci_load_balancer_load_balancer.internal.id
Expand All @@ -30,14 +17,6 @@ resource "oci_load_balancer_listener" "internal" {
protocol = "TCP"
}

resource "oci_load_balancer_listener" "vault" {
name = "vault"
load_balancer_id = oci_load_balancer_load_balancer.internal.id
default_backend_set_name = oci_load_balancer_backend_set.vault.name
port = 8200
protocol = "TCP"
}

resource "oci_load_balancer_load_balancer" "internal" {
compartment_id = var.compartment_ocid
display_name = "internal"
Expand All @@ -55,19 +34,6 @@ resource "oci_load_balancer_load_balancer" "internal" {
}
}

resource "oci_load_balancer_certificate" "vault" {
certificate_name = "vault"
load_balancer_id = oci_load_balancer_load_balancer.internal.id

ca_certificate = var.vault_ca_cert
private_key = file("${path.module}/certificates/vault-key.pem")
public_certificate = var.vault_cert

lifecycle {
create_before_destroy = true
}
}

resource "oci_dns_view" "internal" {
compartment_id = var.compartment_ocid
scope = "PRIVATE"
Expand Down
5 changes: 0 additions & 5 deletions components/terraform/alb/outputs.tf
Original file line number Diff line number Diff line change
Expand Up @@ -3,11 +3,6 @@ output "internal_backend_set_name" {
description = "The name of the internal backend set"
}

output "vault_backend_set_name" {
value = oci_load_balancer_backend_set.vault.name
description = "The name of the vault backend set"
}

output "internal_lb_id" {
value = oci_load_balancer_load_balancer.internal.id
description = "The ID of the internal LB"
Expand Down
8 changes: 0 additions & 8 deletions components/terraform/alb/variables.tf
Original file line number Diff line number Diff line change
Expand Up @@ -41,11 +41,3 @@ variable "environment" {
variable "name" {
type = string
}

variable "vault_ca_cert" {
type = string
}

variable "vault_cert" {
type = string
}
64 changes: 0 additions & 64 deletions stacks/orgs/hs/plat/prod/fra.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,70 +29,6 @@ components:
component: alb
vars:
name: alb
vault_ca_cert: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
vault_cert: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
instance:
metadata:
component: instance
Expand Down

0 comments on commit 29398d7

Please sign in to comment.