IaC Bazaar
OVHcloudStatic-verified

OVHcloud Managed Database

Managed PG/MySQL/Kafka with users, IP restrictions, and private network egress.

terraformAlt & Specialty Clouds#ovh

Compare Managed Relational Database across clouds →

ovh-managed-databaseterraform v1.7

Verification

Static-verified

Passed: validated and lint-clean (provider-schema-validated for AWS/Azure/GCP; Terraform-language lint elsewhere).

Conformance

  • Static validation (fmt · validate · tflint)
  • No applicable security policies for this provider
  • Plan tests (mocked: validation rules · outputs)

Provenance

Functional

  • Live test pending (no cloud run yet)

Last verified 2026-06-28 · how we verify

Verify this download

cosign · sha-256

Don't take our word for it. Every release is signed with cosign - check the bytes against our pinned public key before you trust them.

# 1. Our pinned public key - fetch once, trust out-of-band
curl -O https://www.iac-bazaar.com/cosign.pub

# 2. This module's Sigstore bundle
curl -o ovh-managed-database-1.0.0.sigstore.json \
  https://www.iac-bazaar.com/api/artifacts/ovh-managed-database/signature

# 3. Verify the tarball you downloaded
cosign verify-blob \
  --key cosign.pub \
  --bundle ovh-managed-database-1.0.0.sigstore.json \
  ovh-managed-database-1.0.0.tar.gz
# → Verified OK

# 4. (optional) confirm the checksum too
echo "51e7e6fbea6d8482cb4f6cba382b1ca386515e71b847d0eaa4602eecbb64f208  ovh-managed-database-1.0.0.tar.gz" | sha256sum -c
Signature bundlePublic keyMachine-readable receiptHow we verify

Use it from the registry

terraform · opentofu
module "managed_database" {
  source  = "www.iac-bazaar.com/iac-bazaar/ovh-managed-database/ovh"
  version = "1.0.0"
}

Paid module — needs a purchase (or a subscription that covers it) plus a registry token from /account/tokens. Full setup: registry docs.

Inputs & outputs

Create a free account to read this module's contract

The declared contract — every input name, type, default and description, plus every output — is shown to signed-in accounts, not to anonymous visitors.

A free account sees the contract of every Free module. This one is Premium, so its contract unlocks when you buy it.

Create a free account →Sign in

Documentation

ovh-managed-database

An OVHcloud Managed Database cluster — PostgreSQL, MySQL, Kafka, MongoDB, Redis/Valkey, OpenSearch, Cassandra, M3DB or Grafana — with a deny-by-default IP trust list, optional generic users, and private-network (vRack) node placement.

Status: static-validated, live-test pending. Validated with tofu validate + tflint + checkov against the ovh/ovh provider. Not yet applied against a live OVHcloud project, so it ships under live-test quarantine (no cloud sandbox account yet).

Design & secure defaults

  • Deny-by-default ingress. The cluster authorizes no inbound source until you populate ip_restrictions with explicit CIDR blocks. Each entry is CIDR-validated. (This uses the standalone ovh_cloud_project_database_ip_restriction resource, keyed for clean diffs.)
  • Deletion protection on. deletion_protection = true guards against accidental teardown; set false to allow destroy.
  • Private networking ready. Each node block accepts a network_id (vRack/openstackId) + subnet_id; a validation enforces that all nodes share the same region and network so you cannot mix public and private nodes.
  • Generic users handled safely. users creates accounts via the generic user resource, which OVH supports only for mysql, cassandra, kafka, and grafana. A precondition rejects users on other engines (postgresql, mongodb, redis use dedicated user resources) rather than silently failing. Generated passwords are exposed only through the sensitive output.
  • No hardcoded secrets. Credentials come from the provider block / environment.

The engine matrix is wide; OVH constrains valid version/flavor/plan combinations per engine. Test one engine per run.

Provider

ovh/ovh >= 2.0, < 3.0. Requires Terraform/OpenTofu >= 1.6.

License

Commercial — LicenseRef-IaCBazaar-Commercial. See the IaC Bazaar terms.

Usage code & full reference unlock after purchase

The complete copy-paste usage, the full input/output reference, and operational notes ship with your licence - shown here and bundled in the download.

  • Usage
  • Key inputs
  • Outputs

Related modules

Google Cloud✓ live-tested

AlloyDB for PostgreSQL Cluster

AlloyDB cluster with primary + read-pool instances, PSC connectivity, automated backups and columnar/vector engine flags.

$179.00v1.0.0
AWS✓ live-tested

Aurora Cluster (Serverless v2 ready)

Aurora PostgreSQL/MySQL cluster with instances, parameter groups, Serverless v2 scaling, and enhanced monitoring.

$179.00v1.0.0
Oracle CloudOracle Cloud

Autonomous Database (Serverless)

ATP/ADW/JSON/APEX autonomous database with private endpoint, mTLS wallet output, ACLs, auto-scaling and backup config.

$179.00v1.0.0
Azure✓ live-tested

Azure Cosmos DB Account

Cosmos DB (NoSQL or MongoDB API) with multi-region failover, autoscale throughput, private endpoint and backup policy.

$179.00v1.0.0
Azure✓ live-tested

Azure SQL Database

Logical SQL server + database with Entra-only auth, firewall/private endpoint, auditing, TDE and failover-group option.

$179.00v1.0.0
Oracle CloudOracle Cloud

Base Database Service (DBCS VM)

Oracle Database VM system with DB home, TDE via Vault, automated backups and optional Data Guard standby.

$179.00v1.0.0