Terraform Integration

A quick and simple way to get setup using Torus with Terraform would make it really easy for anyone using Terraform to store/share their secrets inside Torus.

To use Torus today with Terraform or Terragrunt via torus run you have to:

1. Prepend all of your variables with TF_VAR_
2. Tie the top level directory to an org and project via torus link
3. Specify the targeted environment inside Torus for each "environment" or leaf module when executing torus run.

This isn't a lot of work, but it's non-obvious, and could be stream lined. After looking at the options, there are really two pathways forward:

• A better integration through torus run by making it easier or unnecessary to think about 1 and 3.
• Build a terraform provider which can be included as a third party plugin. This would expose the secrets as a property of secrets as a resource which would be configured via provider configuration. Whether this would require the Torus daemon or not and how Torus would get the credentials to retrieve the secrets is up in the air.

Start by reading the existing torus run and torus link workflows described in the issue, then compare the two proposed Terraform integration paths. Review how Terraform and Terragrunt currently receive TF_VAR_ values and select Torus environments. Done requires an agreed integration approach, documented credential behavior, and a working way to retrieve Torus secrets from Terraform.