Major changes

2025-06-05 23:27:50 +02:00
parent a2dc223d1f
commit 3ea65f060f
107 changed files with 714 additions and 76 deletions
@@ -0,0 +1,73 @@
+resource "scaleway_iam_application" "backup_app" {
+  name = "k8s_backup_app"
+}
+
+resource "scaleway_iam_application" "mail_app" {
+  name = "mail_app"
+}
+
+resource "scaleway_iam_application" "sftpgo_app" {
+  name = "sftpgo_app"
+}
+
+resource "scaleway_iam_policy" "object_read_write_backup" {
+  name           = "K8s backup app policy"
+  description    = "Gives k8s backup job access to object storage in project"
+  application_id = scaleway_iam_application.backup_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "ObjectStorageObjectsWrite",
+      "ObjectStorageObjectsRead",
+      "ObjectStorageObjectsDelete",
+      "ObjectStorageBucketsRead"
+    ]
+  }
+}
+
+resource "scaleway_iam_policy" "email_full_access" {
+  name           = "Email full access policy"
+  description    = "Gives access to transactional email in project"
+  application_id = scaleway_iam_application.mail_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "TransactionalEmailFullAccess",
+    ]
+  }
+}
+
+
+resource "scaleway_iam_policy" "object_read_write_sftpgo" {
+  name           = "SFtpGo app policy"
+  description    = "Gives sftpgo job access to object storage in project"
+  application_id = scaleway_iam_application.sftpgo_app.id
+
+  rule {
+    project_ids = [data.scaleway_account_project.default.id]
+    permission_set_names = [
+      "ObjectStorageObjectsWrite",
+      "ObjectStorageObjectsRead",
+      "ObjectStorageBucketsRead",
+      "ObjectStorageBucketsWrite",
+      "ObjectStorageObjectsDelete"
+    ]
+  }
+}
+
+resource "scaleway_iam_api_key" "backup_app_api" {
+  application_id = scaleway_iam_application.backup_app.id
+  description    = "k8s backup app API key"
+}
+
+resource "scaleway_iam_api_key" "mail_app_api" {
+  application_id = scaleway_iam_application.mail_app.id
+  description    = "mail access API key"
+}
+
+resource "scaleway_iam_api_key" "sftpgo_app_api" {
+  application_id = scaleway_iam_application.sftpgo_app.id
+  description    = "sftpgo access API key"
+}