alexpires.me/a13labs.infra
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

Refactor Terraform AWS IAC config to include bucket policies

Browse Source
This commit is contained in:
Alexandre Pires
2024-10-20 22:19:36 +02:00
parent a13f59e616
commit b6885228fa
4 changed files with 91 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
terraform/k8sapps/iam.tf
+12 -12
View File
@@ -1,19 +1,19 @@
resource "scaleway_iam_application" "backup_app" {
name = "k8s_backup_app"
name = "k8s_backup_app"
}
resource "scaleway_iam_application" "mail_app" {
name = "mail_app"
name = "mail_app"
}
resource "scaleway_iam_application" "nextcloud_app" {
name = "nextcloud_app"
name = "nextcloud_app"
}
resource "scaleway_iam_policy" "object_read_write_backup" {
name = "K8s backup app policy"
description = "Gives k8s backup job access to object storage in project"
application_id = scaleway_iam_application.backup_app.id
name = "K8s backup app policy"
description = "Gives k8s backup job access to object storage in project"
application_id = scaleway_iam_application.backup_app.id
rule {
project_ids = [data.scaleway_account_project.default.id]
@@ -27,9 +27,9 @@ resource "scaleway_iam_policy" "object_read_write_backup" {
}
resource "scaleway_iam_policy" "email_full_access" {
name = "Email full access policy"
description = "Gives access to transactional email in project"
application_id = scaleway_iam_application.mail_app.id
name = "Email full access policy"
description = "Gives access to transactional email in project"
application_id = scaleway_iam_application.mail_app.id
rule {
project_ids = [data.scaleway_account_project.default.id]
@@ -40,9 +40,9 @@ resource "scaleway_iam_policy" "email_full_access" {
}
resource "scaleway_iam_policy" "object_read_write_nextcloud" {
name = "Nextcloud app policy"
description = "Gives nextcloud job access to object storage in project"
application_id = scaleway_iam_application.nextcloud_app.id
name = "Nextcloud app policy"
description = "Gives nextcloud job access to object storage in project"
application_id = scaleway_iam_application.nextcloud_app.id
rule {
project_ids = [data.scaleway_account_project.default.id]