NOTIFICATION: SPLIT REPOSITORY

Effective March 25, 2025, this repository will be deprecated and no longer maintained. To ensure you continue receiving the latest updates and support, please transition to using our dedicated Terraform module repositories, each maintained separately.

Common Terraform Modules for Open Telekom Cloud

ViewCount

These are commonly usable Terraform Modules for the Open Telekom Cloud based on the
awesome Terraform OTC Provider.

These modules are developed by iits-consulting - your Cloud-Native Innovation Teams as a
Service!

Usage:

For fully integrated examples please visit the Terratest Directory
You pick modules which you would like to use like this:

module "vpc" {
   source     = "registry.terraform.io/iits-consulting/project-factory/opentelekomcloud//modules/vpc"
   version    = "5.2.0"
   name       = "myproject-dev-vpc"
   cidr_block = "192.168.0.0/16"
   subnets = {
      "myproject-dev-subnet" = cidrsubnet("192.168.0.0/16", 1, 0)
   }
}

Currently Available Modules

ACME: Create, sign and update HTTPS certificates via OTC DNS
CCE: A module designed to support full capabilities of OTC CCE while simplifying the configuration for ease of use.
cts: This module enables the Cloud Tracing functionality in the OTC.
jumphost: A module designed to create SSH jumphosts via OTC ECS for private networks.
keycloak_saml: Connects Keycloak with OTC SAML IDP
keycloak_oidc: Connects Keycloak with OTC OIDC IDP
loadbalancer: Module for creating an OTC ELB resource with public EIP
obs_secrets_reader: This modules reads JSON formatted secrets from an OBS bucket.
obs_secrets_writer: This modules creates an OBS Bucket with KMS SSE default encryption and a JSON encoded secrets file within the bucket.
obs_restricted: This modules creates OBS bucket restricted by predefined access policy.
private_dns: Create and manage a private DNS zone within you VPC
public_dns: Create and manage a public DNS zone
rds: A module designed to support full capabilities of OTC RDS while simplifying the configuration for ease of use.
snat: Public SNAT gateway to grant internet access from a VPC without shared SNAT.
vpn: Creates a VPN tunnel.
waf: Create Web Application Firewall for a Domain
evs: Create an encrypted Elastic Volume Service (EVS)
state_bucket: Create an encrypted state bucket for Terraform
cce_gpu_node_pool: GPU Node Pool for CCE

Quickstart

As a quick start we recommend using this template:

https://github.com/iits-consulting/otc-terraform-template

Then just adjust the set-env.sh and the showcase/dev/main.tf as you wish

Common Concepts behind the modules

There are some variables that occur on multiple modules. The ideas behind them are explained here.

Variable	Description	Example
`context`	A human-readable name of the project	`website`, `payments-service`
`stage`	Name of the environment	`dev`, `test`, `qa`, `prod`

Remarks

The following modules are currently not working for Swiss OTC:

public_dns: Create and manage a public DNS zone
waf: Create Web Application Firewall for a Domain

Recommendations

We recommend this kind of Terraform folder structure:
Set up a secure remote Terraform state
. Copy the backend output of that module to your settings.tf file
Use https://github.com/iits-consulting/otc-infrastructure-charts-template if you want to use ArgoCD (GitOps)

Requirements

No requirements.

Providers

No providers.

Modules

No modules.

Resources

No resources.

Inputs

No inputs.

Outputs

No outputs.

<<<<<<< HEAD

=======

9d63e9e (docs: deprecation warning)