Creating and accessing a Database Instance using Secret Manager and Terraform/OpenTofu

In this tutorial, you will use a Terraform/OpenTofu configuration file that builds your entire infrastructure, such as a Database Instance, a secret, and a version in which your database credentials are stored. You will then be able to access your database credentials securely from the Scaleway console.

Before you start

To complete the actions presented below, you must have:

• A Scaleway account logged into the console
• Owner status or IAM permissions allowing you to perform actions in the intended Organization
• A valid API key
• Created an SSH key

Clone the GitHub repository and configure your environment variables

The Scaleway GitHub repository contains all the code you need to deploy your infrastructure.

1. Open a terminal and clone the repository to your local machine using the following command:

   git clone git@github.com:scaleway/tutorial-sem-terraform.git

2. Access the tutorial-sem-terraform directory:

   cd tutorial-sem-terraform

3. Paste the following command in your terminal to configure your environment variables. Make sure that you replace the placeholder values with your own.

   export SCW_ACCESS_KEY="<SCWxxxxxxxxxxxxxxxxx>"
   export SCW_SECRET_KEY="<xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>"
   export SCW_PROJECT_ID="<xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>"
   export SCW_ORGANIZATION_ID="<xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx>"

Understanding the files and directories

In the tutorial-sem-terraform repository, you will find the following folder structure:

examples/
├─ key-value/
   ├─ app/
   ├─ infra/

• The key-value folder contains two additional folders named app and infra.
• The app folder will interact with the database and ask Secret Manager for the password to connect to the database.
• The infra folder contains the files that will configure your database and secret.

Build and deploy your infrastructure

1. Access the infra folder using the following command:
   cd examples/key-value/infra

2. Run the following command to download the dependencies and initialize Terraform/OpenTofu:
   terraform init

3. Run the following command to configure your infrastructure:
   terraform apply

4. Type yes and Enter when prompted to enter a value. An output similar to the following displays:
   Apply complete! Resources: 3 added, 0 changed, 0 destroyed.
   
   Outputs:
   
   database_public_endpoint = tolist([
     {
       "endpoint_id" = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
       "hostname" = ""
       "ip" = "<public-endpoint>"
       "name" = ""
       "port" = <port>
     },
   ])

5. Navigate to the app folder:
   cd .. && cd app

6. Run the following command:
   go run .

   An output similar to the following should display:
   SCW_DEFAULT_REGION: fr-parSuccessfully connected!

Retrieve your database credentials

1. Click Secret Manager in the Security and Identity section of the Scaleway console side menu.
2. Click the database_secret secret. Open Image over content
   Close current Lightbox
3. Click the Versions tab.
4. Click seeMore icon next to the secret version. Your database's credentials display.