Terraform usage: Difference between revisions

From wikinotes
Line 45: Line 45:
# ${PROJECT}/.envrc
# ${PROJECT}/.envrc


export TF_VAR_api_key=$(pass foo/bar/api_key)
export TF_VAR_api_key="$(pass foo/bar/api_key)"
</syntaxhighlight>
</syntaxhighlight>



Revision as of 20:05, 25 September 2022

Documentation

terraform cli https://www.terraform.io/cli
debugging https://www.terraform.io/internals/debugging

Usage

terraform fmt  # autoformat terraform files

Secrets Management

The simplest way is probably a combination of direnv and pass.

# ${PROJECT}/main.tf

terraform {
  required_providers {
    vultr = {
      source = "vultr/vultr"
      version = ">=2"
    }
  }
}

provider "vultr" {
  api_key = "VULTR_API_KEY"
}

resource "vultr_instance" "web" {
  # ...
}
# ${PROJECT}/.envrc

export TF_VAR_api_key="$(pass foo/bar/api_key)"
cd ${PROJECT}
direnv allow
terraform init