meerkat
borchero/meerkat/vault
Terraform Module for Meerkat Vault Configuration.
Meerkat Vault Configuration Meerkat is a collection of components to deploy OpenVPN easily in Kubernetes. This repository contains the required configuration for Vault which manages all required secrets. Prerequisites Before running the configuration provided via this module, make sure that Kubernetes authentication for Vault is set up and a connection for the database being referenced by this module has already been created. Additionally, Meerkat requires shared secrets that have to be generated on the client and pushed to a Vault key-value store. Specifically, OpenVPN requires Diffie-Hellman parameters as well as a shared key to prevent DoS attacks. For this, you should run the following steps: ``bash Generate Keys openssl dhparam -out dh.pem 2048 openvpn --genkey --secret ta.key Create
| Name | Type | Description | Default |
|---|---|---|---|
| pki_organization | string | The name of the organization issuing certificates. | |
| pki_common_name | string | The common name to use for the CA. | |
| vault_address | string | The endpoint where Vault is reachable for obtaing CRLs for the running Meerkat. | "http://localhost:8200" |
| vault_policy_prefix | string | The prefix of the name of the policies created for Meerkat. | "meerkat" |
| pki_country | string | The 2-letter country code to use for the CA. | "DE" |
| pki_locality | string | The city of the organization issuing certificates. | "Munich" |
| pki_organization_unit | string | The organization unit responsible for the CA. | "IT" |
| vault_pki_path | string | The path for the Meerkat PKI. | "pki/meerkat" |
| vault_kv_path | string | The path for the KV V2 engine used to store the 'dh-params' and 'tls-auth' keys. | "kv/meerat" |
policy_api — The name of the policy that should be assigned to Meerkat's API component.policy_cron — The name of the policy that should be assigned to Meerkat's Cron component.policy_vpn — The name of the policy that should be assigned to Meerkat's VPN component.Azure landing zones Terraform module
Terraform supermodule for the Terraform platform engineering for Azure
Terraform module to deploy landing zone subscriptions (and much more) in Azure
Terraform Module to define a consistent naming convention by (namespace, stage,