{"id":23698222,"url":"https://github.com/samply/open-telekom-cloud","last_synced_at":"2026-01-25T13:30:16.041Z","repository":{"id":35543498,"uuid":"194820449","full_name":"samply/open-telekom-cloud","owner":"samply","description":"Terraform Provisioning for Resources on Open Telekom Cloud","archived":false,"fork":false,"pushed_at":"2022-11-21T17:55:18.000Z","size":121,"stargazers_count":1,"open_issues_count":2,"forks_count":0,"subscribers_count":3,"default_branch":"master","last_synced_at":"2024-12-30T07:14:10.020Z","etag":null,"topics":["lets-encrypt","opentelekomcloud","postgres","terraform-provisioning"],"latest_commit_sha":null,"homepage":null,"language":"HCL","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/samply.png","metadata":{"files":{"readme":"README.MD","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-07-02T08:21:41.000Z","updated_at":"2023-07-25T14:27:09.000Z","dependencies_parsed_at":"2023-01-15T23:06:57.869Z","dependency_job_id":null,"html_url":"https://github.com/samply/open-telekom-cloud","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samply%2Fopen-telekom-cloud","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samply%2Fopen-telekom-cloud/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samply%2Fopen-telekom-cloud/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/samply%2Fopen-telekom-cloud/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/samply","download_url":"https://codeload.github.com/samply/open-telekom-cloud/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":239768931,"owners_count":19693763,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["lets-encrypt","opentelekomcloud","postgres","terraform-provisioning"],"created_at":"2024-12-30T07:14:12.341Z","updated_at":"2026-01-25T13:30:15.849Z","avatar_url":"https://github.com/samply.png","language":"HCL","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Terraform Provisioning for Resources on Open Telekom Cloud\n\n* An already authorized user must create an user at https://console.otc.t-systems.com/iam/users with \"password at first login\" for dashboard access,\nnext steps are for new user:\n\n\n* Create terraform-username at https://console.otc.t-systems.com/iam/users to get access key id and secret for terraform access\n\n* Save as environment in ~\\.bash_profile or ~\\.bashrc or Windows-Umgebungsvariablen (restart) like:\n\n        export TF_VAR_otc_access_key='sfwr2334c4'\n        export TF_VAR_otc_secret_key='gertg245f5435f5ervtrete'\n        export TF_VAR_db_passwd='rwevt43' --\u003eAsk an ITC\n        export AWS_ACCESS_KEY_ID='sfwr2334c4'\n        export AWS_SECRET_ACCESS_KEY='gertg245f5435f5ervtrete'\n\n* Install Terraform, see terraform.io (windows need environment entry, behind proxy set HTTP_PROXY=http://XXX:XX)\n\n* Checkout repo\n\n        git clone https://github.com/samply/open-telekom-cloud.git\n        cd open-telekom-cloud\n\n* Add your ssh key as ignition_user and at this user to ignition_config of server for ssh access to server (main.tf)\n\n* To build a test instance, being accessible at `https:// (search | auth | mdr) .test.germanbiobanknode.de`:\n\n        terraform workspace new test\n        terraform workspace select test\n        \n* To return to productive instance:\n\n        terraform workspace select default\n\n* Init server, db, networks, ... with:\n\n        terraform init\n        terraform plan\n        terraform apply\n        \n* Connect over ssh with user core@ prod=80.158.32.82 or test=80.158.4.11\n\n\n## Container Linux Images\n\nOur VMs use Container Linux basis images. One can download them [here][2]. The images have to be imported into the OTC Image Management Service. The following steps have to be taken:\n\n* download `coreos_production_openstack_image.img.bz2` from [CoreOS][2]\n* unpack the image\n* use s3cmd to upload the image to our `coreos.obs.eu-de.otc.t-systems.com` bucket\n* create an image in Image Management Service/Private Images\n * select the uploaded images from the bucket\n * do not select any OS\n * select 30 GB as disk size\n * name the image `container-linux-\u003cversion\u003e`\n * submit the creation\n \n\n## Managed Postgres Database\n\nThe Terraform Module [Postgres][1] describes a managed postgres database resource (RDS). The database is available under the hostname `postgres.openstacklocal`.\n\n### Root Access to the Database \n\n* Create a SSH tunnel to the database server\n\n```bash\nssh -L 5432:postgres:5432 otc-server-prod\n```\n\n* Access the database on localhost with user root\n\n### Create a Database and User\n\n```sql\nCREATE DATABASE auth;\nCREATE USER auth_user WITH ENCRYPTED PASSWORD '...';\nGRANT auth_user TO root;\nGRANT ALL PRIVILEGES ON DATABASE auth TO auth_user;\n```\n\n## Create New Let's Encrypt Certificate\n\nCheck that the certificate isn't already known:\n\n```bash\ndocker run --rm -v /etc/nginx/ssl:/etc/letsencrypt certbot/certbot:v0.36.0 certificates\n```\n\nFirst do a dry run for each domain:\n\n```bash\ndocker run -it --rm \\\n  -v /etc/nginx/ssl:/etc/letsencrypt \\\n  -v acme-challenge:/certbot \\\n  certbot/certbot:v0.36.0 \\\n  certonly --dry-run --agree-tos --webroot --webroot-path /certbot \\\n  -d \u003cdomain\u003e\n```\n\nIf Nginx is down because of missing certificates, uncomment all server blocks listening to 443.\n\nThan do the same removing `--dry-run`\n\n### Re-destroy\n\n* In the \"Volume Backup Service\" section choose your previously created backup of `server-data-(test/default)`\n* Select \"Restore Disk\". \nIf errors occur, select \"Create Disk\" with same name and size, search for its id and replace \u003cid\u003e:\n```bash\nterraform import module.server.opentelekomcloud_blockstorage_volume_v2.data \u003cid\u003e\n```\n* Apply and restore database\n\n[1]: \u003chttps://github.com/samply/open-telekom-cloud/tree/master/modules/postgres\u003e\n[2]: \u003chttps://coreos.com/releases/\u003e\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsamply%2Fopen-telekom-cloud","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsamply%2Fopen-telekom-cloud","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsamply%2Fopen-telekom-cloud/lists"}