tofu fmt -recursive and kvv1/cloudflare permission for cms project

hashicorp-vault/iac/modules/app_roles/main.tf

@@ -3,27 +3,27 @@ data "vault_auth_backend" "kubernetes" {
 }
 
 locals {
-  name = lower(var.name)
+  name     = lower(var.name)
   database = var.database == null ? local.name : var.database
 
   vault_mount_postgres = { path = "postgres" }
-  vault_mount_kvv2 = { path = "kvv2" }
+  vault_mount_kvv2     = { path = "kvv2" }
 }
 
 resource "vault_database_secret_backend_role" "role" {
-  backend             = local.vault_mount_postgres.path
-  name                = "${local.name}"
-  db_name             = "postgres"
+  backend = local.vault_mount_postgres.path
+  name    = local.name
+  db_name = "postgres"
   creation_statements = [
     "CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}';",
     "GRANT ${local.name}_role TO \"{{name}}\";",
-  ] 
+  ]
   revocation_statements = [
     "REASSIGN OWNED BY \"{{name}}\" TO ${local.name}_role;",
     "REVOKE ALL ON DATABASE ${local.database} FROM  \"{{name}}\";", # should we drop the role ?
   ]
-  renew_statements=[]
-  rollback_statements=[]
+  renew_statements    = []
+  rollback_statements = []
 }
 
 resource "vault_kubernetes_auth_backend_role" "role" {

hashicorp-vault/iac/modules/app_roles/outputs.tf

@@ -6,8 +6,8 @@ output "database" {
 }
 output "mount_paths" {
   value = {
-    k8s = data.vault_auth_backend.kubernetes.path
-    pg = local.vault_mount_postgres.path
+    k8s  = data.vault_auth_backend.kubernetes.path
+    pg   = local.vault_mount_postgres.path
     kvv2 = local.vault_mount_kvv2.path
   }
 }

hashicorp-vault/iac/modules/app_roles/providers.tf

@@ -1,8 +1,8 @@
 terraform {
-    required_providers {
-      vault = {
-        source = "vault"
-        version = ">= 4.4.0"
-      }
+  required_providers {
+    vault = {
+      source  = "vault"
+      version = ">= 4.4.0"
     }
+  }
 }

hashicorp-vault/iac/modules/app_roles/variables.tf

@@ -2,7 +2,7 @@ variable "name" {
   type = string
 }
 variable "database" {
-  type = string
+  type     = string
   nullable = true
-  default = null
+  default  = null
 }