feat(terraform): update metallb version, refactor IAM policies, and enhance security
This commit is contained in:
@@ -6,10 +6,6 @@ resource "scaleway_iam_application" "mail_app" {
|
||||
name = "mail_app"
|
||||
}
|
||||
|
||||
resource "scaleway_iam_application" "dovecot_app" {
|
||||
name = "dovecot_app"
|
||||
}
|
||||
|
||||
resource "scaleway_iam_application" "sftpgo_app" {
|
||||
name = "sftpgo_app"
|
||||
}
|
||||
@@ -43,23 +39,6 @@ resource "scaleway_iam_policy" "email_full_access" {
|
||||
}
|
||||
}
|
||||
|
||||
resource "scaleway_iam_policy" "object_read_write_dovecot" {
|
||||
name = "Dovecot app policy"
|
||||
description = "Gives dovecot job access to object storage in project"
|
||||
application_id = scaleway_iam_application.dovecot_app.id
|
||||
|
||||
rule {
|
||||
project_ids = [data.scaleway_account_project.default.id]
|
||||
permission_set_names = [
|
||||
"ObjectStorageObjectsWrite",
|
||||
"ObjectStorageObjectsRead",
|
||||
"ObjectStorageBucketsRead",
|
||||
"ObjectStorageBucketsWrite",
|
||||
"ObjectStorageObjectsDelete"
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
resource "scaleway_iam_policy" "object_read_write_sftpgo" {
|
||||
name = "SFtpGo app policy"
|
||||
@@ -88,11 +67,6 @@ resource "scaleway_iam_api_key" "mail_app_api" {
|
||||
description = "mail access API key"
|
||||
}
|
||||
|
||||
resource "scaleway_iam_api_key" "dovecot_app_api" {
|
||||
application_id = scaleway_iam_application.dovecot_app.id
|
||||
description = "dovecot access API key"
|
||||
}
|
||||
|
||||
resource "scaleway_iam_api_key" "sftpgo_app_api" {
|
||||
application_id = scaleway_iam_application.sftpgo_app.id
|
||||
description = "sftpgo access API key"
|
||||
|
||||
Reference in New Issue
Block a user