Add .gitignore

Signed-off-by: Prajyot-Parab <[email protected]>

Author: Prajyot-Parab

infra/ibmcloud/terraform/.gitignore

@@ -0,0 +1,31 @@
+# Local .terraform directories
+**/.terraform/*
+
+# Terraform lockfile
+.terraform.lock.hcl
+
+# .tfstate files
+*.tfstate
+*.tfstate.*
+*.tfplan
+plan.out
+
+# Crash log files
+crash.log
+
+# Exclude all .tfvars files, which are likely to contain sentitive data, such as
+# password, private keys, and other secrets. These should not be part of version
+# control as they are data points which are potentially sensitive and subject
+# to change depending on the environment.
+*.tfvars
+
+# Ignore override files as they are usually used to override resources locally and so
+# are not checked in
+override.tf
+override.tf.json
+*_override.tf
+*_override.tf.json
+
+# Ignore CLI configuration files
+.terraformrc
+terraform.rc

infra/ibmcloud/terraform/k8s-infra-setup/README.md

@@ -22,7 +22,7 @@ terraform init -reconfigure
 `ibmcloud_api_key` is the only required variable that you must set in order to proceed. You can set this key either by adding it to your `var.tfvars` file or by exporting it as an environment variable.
 
 **Option 1:** Set in `var.tfvars` file
-Add the following line to the `var.tfvars` file:
+Create `var.tfvars` file and set the following variable in `var.tfvars` file:
 ```
 ibmcloud_api_key = "<YOUR_API_KEY>"
 ```

infra/ibmcloud/terraform/k8s-infra-setup/modules/secrets_manager/secrets_manager.tf

@@ -40,17 +40,19 @@ resource "tls_private_key" "private_key" {
 }
 
 resource "ibm_sm_arbitrary_secret" "ssh_private_key" {
-  name        = "powervs-ssh-private-key"
+  name        = "build-cluster-ssh-private-key"
+  description = "SSH private key for secure deployment and access to the ppc64le build cluster."
   instance_id = ibm_resource_instance.secrets_manager.guid
   region      = local.secrets_manager_region
-  labels      = ["powervs-ssh-private-key"]
+  labels      = ["build-cluster-ssh-private-key"]
   payload     = tls_private_key.private_key.private_key_openssh
 }
 
 resource "ibm_sm_arbitrary_secret" "ssh_public_key" {
-  name        = "powervs-ssh-public-key"
+  name        = "build-cluster-ssh-public-key"
+  description = "SSH public key for secure deployment and access to the ppc64le build cluster."
   instance_id = ibm_resource_instance.secrets_manager.guid
   region      = local.secrets_manager_region
-  labels      = ["powervs-ssh-public-key"]
+  labels      = ["build-cluster-ssh-public-key"]
   payload     = tls_private_key.private_key.public_key_openssh
 }

infra/ibmcloud/terraform/k8s-infra-setup/var.tfvars

@@ -32,7 +32,7 @@ terraform init -reconfigure
 `ibmcloud_api_key`, `service_instance_id`, `secrets_manager_id` are the only required variables that you must set in order to proceed. You can set this key either by adding it to your `var.tfvars` file or by exporting it as an environment variable.
 
 **Option 1:** Set in `var.tfvars` file
-Add the following line to the `var.tfvars` file:
+Create `var.tfvars` file and set the following variables in `var.tfvars` file:
 ```
 ibmcloud_api_key    = "<YOUR_API_KEY>"
 service_instance_id = "<POWERVS_SERVICE_INSTANCE_ID>"