Introduction

The CCM Terraform Provider transforms the Fortanix Confidential Computing Manager RESTful API functionality into easy to consume Terraform configurations. The usage of CCM Terraform Provider eliminates the need to understand how to consume raw Fortanix Confidential Computing Manager APIs.

Prerequisites

Fortanix CCM Setup

The usage of CCM Terraform Provider assumes the following is pre-configured in one's environment:

• Up-to-date CCM deployment:
  • Trial / Test environment maybe provisioned via [ccm.test.fortanix.com]
• Production / Test account or tenant has already been provisioned within Fortanix CCM.

Authentication and Configuration

• Note: Following Authentication method needs to be available during the CCM Terraform Provider initial setup.

Authentication methods	Required Attributes	Description
Username & Password	1. username 2. password 3. account id	Username, Password and an Account ID should be configured. Account ID can be found in CCM UI by going to settings.

CCM

Initial setup of the Fortanix CCM Provider to interact using Terraform.

Example Reference

terraform {
  required_providers {
    ccm = {
      version = "0.1.0"
      source = "fortanix/ccm"
    }
  }
}

// Configure with username and password
provider "ccm" {
    endpoint = "https://ccm.test.fortanix.com"
    username = "test@user.com"
    password = "12345678"
    acct_id  = "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"
}

// Disable the SSL
provider "ccm" {
    endpoint = "https://ccm.test.fortanix.com"
    username = "test@user.com"
    password = "12345678"
    acct_id  = "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"
    insecure = false
}

Schema

Required

• acct_id (String) UUID of the Account.
• endpoint (String) The base URL of the Fortanix CCM API.
• username (String) Email address for User authentication.
• password (String, Sensitive) Password for User authentication.

Optional

• insecure (Boolean) When true, TLS certificate verification is skipped.
• timeout (Number) HTTP request timeout in seconds.

Attributes usage definitions

• Required: This attribute must be provided by the user in the Terraform configuration. If it is not specified, Terraform will return an error during the plan or apply phases.
• Optional: This attribute is not mandatory. If it is not provided by the user, Terraform will use a default value (if any). Users can specify it to override the default behavior.
• Read-Only: This attribute is output-only and cannot be set by the user. It provides information that is determined by the provider or the state of the resource after it has been created or updated. Also known as a "computed" attribute.