this repo has no description
refactor(infra): use jsonencode instead of HCL raw string
+39
-33
+39
-33
infra/production/root.hcl
+39
-33
infra/production/root.hcl
···
4
4
}
5
5
6
6
generate "backend" {
7
-
path = "backend.tf"
8
-
if_exists = "overwrite_terragrunt"
9
-
contents = <<EOF
10
-
terraform {
11
-
backend "s3" {
12
-
bucket = "tfstate-${local.env}"
13
-
key = "${path_relative_to_include()}/tfstate.json"
14
-
region = "auto"
15
-
skip_credentials_validation = true
16
-
skip_metadata_api_check = true
17
-
skip_region_validation = true
18
-
skip_requesting_account_id = true
19
-
skip_s3_checksum = true
20
-
use_path_style = true
21
-
access_key = "${local.secrets.cloudflare_tfstate_access_key}"
22
-
secret_key = "${local.secrets.cloudflare_tfstate_secret_key}"
23
-
endpoints = { s3 = "https://${local.secrets.cloudflare_account_id}.r2.cloudflarestorage.com" }
24
-
}
25
-
}
26
-
EOF
7
+
path = "backend.tf.json"
8
+
if_exists = "overwrite"
9
+
disable_signature = true
10
+
contents = jsonencode({
11
+
terraform = {
12
+
backend = {
13
+
s3 = {
14
+
bucket = "tfstate-${local.env}"
15
+
key = "${path_relative_to_include()}/tfstate.json"
16
+
region = "auto"
17
+
skip_credentials_validation = true
18
+
skip_metadata_api_check = true
19
+
skip_region_validation = true
20
+
skip_requesting_account_id = true
21
+
skip_s3_checksum = true
22
+
use_path_style = true
23
+
access_key = local.secrets.cloudflare_tfstate_access_key
24
+
secret_key = local.secrets.cloudflare_tfstate_secret_key
25
+
endpoints = {
26
+
s3 = "https://${local.secrets.cloudflare_account_id}.r2.cloudflarestorage.com"
27
+
}
28
+
}
29
+
}
30
+
}
31
+
})
27
32
}
28
33
29
34
generate "provider" {
30
-
path = "provider.tf"
31
-
if_exists = "overwrite_terragrunt"
32
-
contents = <<EOF
33
-
provider "oci" {
34
-
tenancy_ocid = "${local.secrets.oracle_tenancy_ocid}"
35
-
user_ocid = "${local.secrets.oracle_user_ocid}"
36
-
fingerprint = "${local.secrets.oracle_fingerprint}"
37
-
private_key = <<EOT
38
-
${local.secrets.oracle_private_key}
39
-
EOT
40
-
region = "${local.secrets.oracle_region}"
41
-
}
42
-
EOF
35
+
path = "provider.tf.json"
36
+
if_exists = "overwrite"
37
+
disable_signature = true
38
+
contents = jsonencode({
39
+
provider = {
40
+
oci = {
41
+
tenancy_ocid = local.secrets.oracle_tenancy_ocid
42
+
user_ocid = local.secrets.oracle_user_ocid
43
+
fingerprint = local.secrets.oracle_fingerprint
44
+
private_key = local.secrets.oracle_private_key
45
+
region = local.secrets.oracle_region
46
+
}
47
+
}
48
+
})
43
49
}