fix: remove experiments from terraform config (#16)

Co-authored-by: Yoan Blanc <[email protected]>

Author: evooq-laurent

README.md

@@ -17,7 +17,7 @@ In particular:
 
 ```hcl
 module "my_database" {
-  source = "[email protected]:edgelaboratories/terraform-mysql-db?ref=v0.2.2"
+  source = "[email protected]:edgelaboratories/terraform-mysql-db?ref=v0.2.3"
 
   database = "my-database"
 
@@ -42,7 +42,7 @@ You can provide extra permissions for `all-privileges` or `read-only` roles with
 
 ```hcl
 module "my_database" {
-  source = "[email protected]:edgelaboratories/terraform-mysql-db?ref=v0.2.2"
+  source = "[email protected]:edgelaboratories/terraform-mysql-db?ref=v0.2.3"
 
   database = "my-database"
 
@@ -53,6 +53,7 @@ module "my_database" {
 
   vault_roles_extra_statements = {
     all-privileges = ["GRANT XA_RECOVER_ADMIN ON *.* TO '{{name}}'@'%';"]
+    read-only      = []
   }
 }
 ```

provider.tf

@@ -1,6 +1,4 @@
 terraform {
-  experiments = [module_variable_optional_attrs]
-
   required_providers {
     mysql = {
       source = "winebarrel/mysql"

variables.tf

@@ -37,10 +37,6 @@ variable "vault_role_default_ttl" {
 }
 
 variable "vault_roles_extra_statements" {
-  type = object({
-    all-privileges = optional(list(string)),
-    read-only      = optional(list(string)),
-  })
-
+  type    = map(any)
   default = {}
 }

vault.tf

@@ -16,7 +16,7 @@ resource "vault_database_secret_backend_role" "this" {
     [
       "CREATE USER '{{name}}'@'%' IDENTIFIED BY '{{password}}';",
       "GRANT ${each.value} ON `${var.database}`.* TO '{{name}}'@'%';",
-    ], coalesce(var.vault_roles_extra_statements[each.key], []),
+    ], lookup(var.vault_roles_extra_statements, each.key, []),
   )
 
   default_ttl = var.vault_role_default_ttl