ref(hydrate): #0 use hydrate-* nomenclature in prep for on-prem req

- this is a better naming convention for becoming cloud agnostic

modules/terraform/hydrate/docker-pwd.nix → modules/terraform/hydrate-cluster/docker-pwd.nix

@@ -2,7 +2,7 @@
 { terralib, ... }:
 let inherit (terralib) var;
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     data.sops_file.docker-developer-password.source_file =
       "./encrypted/docker-passwords.json";

modules/terraform/hydrate/policies.nix → modules/terraform/hydrate-cluster/policies.nix

@@ -6,7 +6,7 @@
 let
 
   inherit (terralib) var id;
-  tfcfg = config.tf.hydrate.configuration;
+  tfcfg = config.tf.hydrate-cluster.cluster.configuration;
 
   __fromTOML = builtins.fromTOML;
 
@@ -15,7 +15,7 @@ let
   consulPolicies = tfcfg.locals.policies.consul;
 
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.cluster.configuration = {
 
     # this is an auxiliary datastructure that can be modified/extended via terranix's magic merge
     locals.policies = __fromTOML (__readFile ./policies.toml);

modules/terraform/hydrate/transit-sops-bk.nix → modules/terraform/hydrate-cluster/transit-sops-bk.nix

@@ -8,7 +8,7 @@ let
 
   inherit (terralib) var;
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     resource.vault_mount.sops = {
       path = "sops";

modules/terraform/hydrate/vault-aws-auth.nix → modules/terraform/hydrate-cluster/vault-aws-auth.nix

@@ -1,8 +1,8 @@
-# hydrate aws groups & policies
+# hydrate-cluster.aws groups & policies
 { terralib, ... }:
 let inherit (terralib) var;
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     resource.aws_iam_group = {
       developers = {

modules/terraform/hydrate/vault-github-auth.nix → modules/terraform/hydrate-cluster/vault-github-auth.nix

@@ -7,7 +7,7 @@ let
     adminGithubTeamNames developerGithubTeamNames developerGithubNames;
 
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     resource.vault_github_auth_backend.employee = {
       organization = "input-output-hk";

modules/terraform/hydrate/vault-mounts.nix → modules/terraform/hydrate-cluster/vault-mounts.nix

@@ -12,7 +12,7 @@ let
   __fromTOML = builtins.fromTOML;
 
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     resource.vault_mount.${runtimeSecretsPath} = {
       path = "${runtimeSecretsPath}";

modules/terraform/hydrate/vault-pki.nix → modules/terraform/hydrate-cluster/vault-pki.nix

@@ -9,7 +9,7 @@ let
   inherit (config.cluster) domain;
 
 in {
-  tf.hydrate.configuration = {
+  tf.hydrate-cluster.configuration = {
 
     data.sops_file.ca = { source_file = "./encrypted/ca.json"; };
     # TODO: commented parts are currently accomplished by a systemd one-shot

modules/terraform/hydrate.nix

@@ -13,8 +13,19 @@ let
 
 in {
 
-  # preconfigure secrets-hydrate
-  tf.secrets-hydrate.configuration = {
+  # preconfigure hydrate-secrets
+  tf.secrets-hydrate.configuration = lib.warn ''
+
+    secrets-hydrate had been renamed to hydrate-secrets
+    please rename your infra cluster tf vault backend accordingly
+    and switch!
+
+
+    VAULT_ADDR=https://vault.infra.aws.iohkdev.io
+    VAULT_TOKEN=$TF_HTTP_PASSWORD
+    vault kv put secret/vbk/$BITTE_CLUSTER/hydrate-secrets @<(vault kv get -format=json secret/vbk/$BITTE_CLUSTER/secrets-hydrate | jq .data.data)
+  '' config.tf.hydrate-secrets.configuration;
+  tf.hydrate-secrets.configuration = {
     terraform.backend.http = {
       address = "${vbkStub}/secrets-hydrate";
       lock_address = "${vbkStub}/secrets-hydrate";
@@ -24,8 +35,19 @@ in {
     provider.vault = { };
   };
 
-  # preconfigure app-hydrate
-  tf.app-hydrate.configuration = {
+  # preconfigure hydrate-app
+  tf.app-hydrate.configuration = lib.warn ''
+
+    app-hydrate had been renamed to hydrate-app
+    please rename your infra cluster tf vault backend accordingly
+    and switch!
+
+
+    VAULT_ADDR=https://vault.infra.aws.iohkdev.io
+    VAULT_TOKEN=$TF_HTTP_PASSWORD
+    vault kv put secret/vbk/$BITTE_CLUSTER/hydrate-app @<(vault kv get -format=json secret/vbk/$BITTE_CLUSTER/app-hydrate | jq .data.data)
+  '' config.tf.hydrate-app.configuration;
+  tf.hydrate-app.configuration = {
     terraform.backend.http = {
       address = "${vbkStub}/app-hydrate";
       lock_address = "${vbkStub}/app-hydrate";
@@ -35,8 +57,19 @@ in {
     provider.vault = { };
   };
 
-  # preconfigure (cluster-)hydrate
-  tf.hydrate.configuration = {
+  # preconfigure hydrate-cluster
+  tf.hydrate.configuration = lib.warn ''
+
+    hydrate had been renamed to hydrate-cluster
+    please rename your infra cluster tf vault backend accordingly
+    and switch!
+
+
+    VAULT_ADDR=https://vault.infra.aws.iohkdev.io
+    VAULT_TOKEN=$TF_HTTP_PASSWORD
+    vault kv put secret/vbk/$BITTE_CLUSTER/hydrate-cluster @<(vault kv get -format=json secret/vbk/$BITTE_CLUSTER/hydrate | jq .data.data)
+  '' config.tf.hydrate-cluster.configuration;
+  tf.hydrate-cluster.configuration = {
     terraform.backend.http = {
       address = "${vbkStub}/hydrate";
       lock_address = "${vbkStub}/hydrate";