forked from public/stack
54 lines
1.4 KiB
Terraform
54 lines
1.4 KiB
Terraform
|
terraform {
|
||
|
|
required_providers {
|
||
|
|
digitalocean = {
|
||
|
|
source = "digitalocean/digitalocean"
|
||
|
|
version = "~> 2.0"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "digitalocean_database_cluster" "main" {
|
||
|
|
name = var.cluster_name
|
||
|
|
engine = var.db_engine
|
||
|
|
size = var.size
|
||
|
|
region = var.digitalocean_region
|
||
|
|
node_count = var.node_count
|
||
|
|
version = var.db_version
|
||
|
|
private_network_uuid = var.vpc_id # TODO: nullable = true
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "digitalocean_database_db" "main" {
|
||
|
|
for_each = { for db in var.databases: db.name => db }
|
||
|
|
|
||
|
|
cluster_id = digitalocean_database_cluster.main.id
|
||
|
|
name = each.key
|
||
|
|
}
|
||
|
|
|
||
|
|
locals {
|
||
|
|
base_connection_string = trimsuffix(digitalocean_database_cluster.main.uri,
|
||
|
|
"/defaultdb?sslmode=require")
|
||
|
|
}
|
||
|
|
|
||
|
|
resource "digitalocean_database_user" "default_users" {
|
||
|
|
for_each = {
|
||
|
|
for db in [for db in var.databases: db if db.create_default_superuser]:
|
||
|
|
db.name => db.name
|
||
|
|
}
|
||
|
|
|
||
|
|
cluster_id = digitalocean_database_cluster.main.id
|
||
|
|
name = each.key
|
||
|
|
|
||
|
|
provisioner "local-exec" {
|
||
|
|
command = "GRANT ALL ON DATABASE ${each.key} TO ${each.key}"
|
||
|
|
interpreter = ["psql", "${local.base_connection_string}/${each.key}"]
|
||
|
|
}
|
||
|
|
|
||
|
|
provisioner "local-exec" {
|
||
|
|
command = "GRANT ALL ON SCHEMA public TO ${each.key}"
|
||
|
|
interpreter = ["psql", "${local.base_connection_string}/${each.key}"]
|
||
|
|
}
|
||
|
|
|
||
|
|
# Note: provisioners depend on databases existing
|
||
|
|
depends_on = [digitalocean_database_db.main]
|
||
|
|
}
|