Merge pull request #95 from ovh/ava-s3-bucket-ovh-tf

Deploy Object Storage containers with OVHcloud TF provider

Author: scraly

storage/s3-with-tf/README.md

@@ -1,16 +1,36 @@
-# Create a simple Object container storage
+# Create a simple Object Storage container (S3™ compatible bucket)
 
-To run this TF code you need to set some environment variables (mandatory for AWS provider):
+The aim of this example is to deploy two Object Storage containers. One in 1-AZ region and one in 3-AZ region.
 
+### Set up
+  - Install the [Terraform CLI](https://www.terraform.io/downloads.html)
+  - Get the credentials from the OVHCloud Public Cloud project:
+    - `application_key`
+    - `application_secret`
+    - `consumer_key`
+  - Get the `service_name` (Public Cloud project ID)
+
+### Demo
+  - set the environment variables `OVH_APPLICATION_KEY`, `OVH_APPLICATION_SECRET`, `OVH_CONSUMER_KEY` and `OVH_CLOUD_PROJECT_SERVICE`
+
+```bash
+# OVHcloud provider needed keys
+export OVH_ENDPOINT="ovh-eu"
+export OVH_APPLICATION_KEY="xxx"
+export OVH_APPLICATION_SECRET="xxx"
+export OVH_CONSUMER_KEY="xxx"
+export OVH_CLOUD_PROJECT_SERVICE="xxx"
 ```
-export AWS_ACCESS_KEY_ID="<your_access_key>"
-export AWS_SECRET_ACCESS_KEY="<your_secret_access_key>"
-```
+  - Replace the value of your OVH_CLOUD_PROJECT_SERVICE environment variable in the [variables.tf](variables.tf) file (in the service_name variable)
+
+`envsubst < variables.tf.template > variables.tf`
 
-To define the region (depending on our needs), follow this guide:
+To define the region of your containers (depending on our needs), follow this guide:
 https://help.ovhcloud.com/csm/en-gb-public-cloud-storage-s3-location?id=kb_article_view&sysparm_article=KB0047382
 
-And then update the region variable in the `variables.tf` file.
+And then update the regions variables in the `variables.tf` file.
+
+/!\ The region must be in uppercase!
 
 Run the TF command `terraform apply`:
 ```bash

storage/s3-with-tf/create-s3-buckets.tf

@@ -1,5 +1,13 @@
-# Create the bucket, the force_destroy argument will destroy the bucket even if it contains objects
-resource "aws_s3_bucket" "my-bucket-s3" {
-  force_destroy = true
-  bucket = "bucket-name" # the name must be unique within OVHcloud
+# Create a bucket, in 1-AZ region 
+resource "ovh_cloud_project_storage" "my_s3_bucket_1az" {
+  service_name = var.service_name
+  region_name = var.region_1AZ
+  name = "bucket-name"  # the name must be unique within OVHcloud
+}
+
+# Create a bucket, in 3-AZ region 
+resource "ovh_cloud_project_storage" "my_s3_bucket_3az" {
+  service_name = var.service_name
+  region_name = var.region_3AZ
+  name = "bucket-name-3az"  # the name must be unique within OVHcloud
 }

storage/s3-with-tf/output.tf

@@ -1,5 +1,9 @@
 # Output the Object Storage name after its creation
 
-output "my-bucket-s3" {
-  value = "${aws_s3_bucket.my-bucket-s3.id}"
+output "my_s3_bucket_1az" {
+  value = "${ovh_cloud_project_storage.my_s3_bucket_1az.name}"
+}
+
+output "my_s3_bucket_3az" {
+  value = "${ovh_cloud_project_storage.my_s3_bucket_3az.name}"
 }

storage/s3-with-tf/provider.tf

@@ -1,21 +1,11 @@
 terraform {
   required_providers {
-    aws = {
-      source  = "hashicorp/aws"
+    ovh = {
+      source  = "ovh/ovh"
     }
   }
 }
 
-# Configure the AWS Provider
-provider "aws" {
-  region     = "${var.region}"
-
-  # OVH implementation has no STS service
-  skip_credentials_validation = true
-  skip_requesting_account_id  = true
-  # the gra region is unknown to AWS hence skipping is needed.
-  skip_region_validation = true
-  endpoints {
-    s3 = "https://s3.${var.region}.io.cloud.ovh.net"
-  }
+provider "ovh" {
+  endpoint           = "ovh-eu"
 }

storage/s3-with-tf/variables.tf

@@ -0,0 +1,11 @@
+variable "service_name" {
+  default = "$OVH_CLOUD_PROJECT_SERVICE"
+}
+
+variable "region_1AZ" {
+    default = "GRA" #The region must be in uppercase
+}
+
+variable "region_3AZ" {
+    default = "EU-WEST-PAR" #The region must be in uppercase
+}