Merge pull request #18 from companieshouse/feature/tnsnames-cloud-init

Construct Oracle Database config at instance startup
companieshouse · Apr 30, 2021 · aab66ba · aab66ba
2 parents 1f0e900 + 0b4f20d
commit aab66ba
Show file tree

Hide file tree

Showing 3 changed files with 28 additions and 0 deletions.
diff --git a/groups/frontend/cloud-init.tf b/groups/frontend/cloud-init.tf
@@ -9,6 +9,14 @@ data "template_cloudinit_config" "config" {
     content = templatefile("${path.module}/cloud-init/templates/system-config.yml.tpl", {})
   }
 
+  part {
+    content_type = "text/cloud-config"
+    content = templatefile("${path.module}/cloud-init/templates/tnsnames.ora.tpl", {
+      tnsnames = jsondecode(data.vault_generic_secret.tns_names.data.tnsnames)
+    })
+    merge_type = var.user_data_merge_strategy
+  }
+
   part {
     content_type = "text/cloud-config"
     content = templatefile("${path.module}/cloud-init/templates/bootstrap-commands.yml.tpl", {

diff --git a/groups/frontend/cloud-init/templates/tnsnames.ora.tpl b/groups/frontend/cloud-init/templates/tnsnames.ora.tpl
@@ -0,0 +1,16 @@
+write_files:
+  - path: /opt/oracle/10.2.0/network/admin/tnsnames.ora
+    owner: root:root
+    permissions: 0644
+    content: |
+      %{ for db in tnsnames }${ db.name } =
+        (DESCRIPTION =
+          (ADDRESS_LIST =
+            (ADDRESS = (PROTOCOL = TCP)(HOST = ${ db.address })(PORT = ${ db.port }))
+          )
+          (CONNECT_DATA =
+            (SERVICE_NAME = ${ db.service_name })
+            (SERVER = DEDICATED)
+          )
+        )
+      %{ endfor }
diff --git a/groups/frontend/secrets.tf b/groups/frontend/secrets.tf
@@ -9,3 +9,7 @@ data "vault_generic_secret" "security_s3_buckets" {
 data "vault_generic_secret" "security_kms_keys" {
   path = "aws-accounts/security/kms"
 }
+
+data "vault_generic_secret" "tns_names" {
+  path = "applications/${var.aws_account}-${var.region}/tuxedo/tnsnames"
+}