Terraform stuff for NGI
Eelco Dolstra committed
May 21, 2020 at 17:07 UTC
548449bbd8debd4c753f0cad8aa8424596c725f9
3 files changed
+57
ngi0/terraform/cache.tf
new
+41
@@ -0,0 +1,41 @@
1
+resource "aws_s3_bucket" "cache" {
2
+ provider = aws
3
+ bucket = "ngi0-cache"
4
+
5
+ lifecycle_rule {
6
+ enabled = true
7
+
8
+ transition {
9
+ days = 365
10
+ storage_class = "STANDARD_IA"
11
+ }
12
+ }
13
+
14
+ cors_rule {
15
+ allowed_headers = ["Authorization"]
16
+ allowed_methods = ["GET"]
17
+ allowed_origins = ["*"]
18
+ max_age_seconds = 3000
19
+ }
20
+}
21
+
22
+resource "aws_s3_bucket_policy" "cache" {
23
+ provider = aws
24
+ bucket = aws_s3_bucket.cache.id
25
+ policy = <<EOF
26
+{
27
+ "Version": "2008-10-17",
28
+ "Statement": [
29
+ {
30
+ "Sid": "AllowPublicRead",
31
+ "Effect": "Allow",
32
+ "Principal": {
33
+ "AWS": "*"
34
+ },
35
+ "Action": "s3:GetObject",
36
+ "Resource": "arn:aws:s3:::${aws_s3_bucket.cache.id}/*"
37
+ }
38
+ ]
39
+}
40
+EOF
41
+}
ngi0/terraform/hydra-user.tf
new
+8
@@ -0,0 +1,8 @@
1
+resource "aws_iam_user" "hydra" {
2
+ provider = aws
3
+ name = "hydra"
4
+}
5
+
6
+resource "aws_iam_access_key" "hydra" {
7
+ user = aws_iam_user.hydra.name
8
+}
ngi0/terraform/providers.tf
new
+8
@@ -0,0 +1,8 @@
1
+provider "aws" {
2
+ region = "eu-west-1"
3
+}
4
+
5
+provider "aws" {
6
+ alias = "us"
7
+ region = "us-east-1"
8
+}