about summary refs log tree commit diff
path: root/corp/ops/main.tf
diff options
context:
space:
mode:
authorVincent Ambo <mail@tazj.in>2023-04-21T16·25+0300
committertazjin <tazjin@tvl.su>2023-04-24T10·56+0000
commitc7392b3c6b99bffb06965c81c7bf273371ce813e (patch)
tree98374bc74f4cebe09fcd4ad0901d015ea0ab596a /corp/ops/main.tf
parent111e1d38e5ac177bcf4defe70aee1e853206bc6d (diff)
chore(corp/ops): move terraform config into subfolder r/6110
Change-Id: Iad5ad8d9a48c300faf2e4be7003879656817b518
Reviewed-on: https://cl.tvl.fyi/c/depot/+/8495
Tested-by: BuildkiteCI
Reviewed-by: tazjin <tazjin@tvl.su>
Diffstat (limited to 'corp/ops/main.tf')
-rw-r--r--corp/ops/main.tf77
1 files changed, 0 insertions, 77 deletions
diff --git a/corp/ops/main.tf b/corp/ops/main.tf
deleted file mode 100644
index 1b87e95115ca..000000000000
--- a/corp/ops/main.tf
+++ /dev/null
@@ -1,77 +0,0 @@
-# Terraform configuration for TVL corp infrastructure (on Yandex
-# Cloud).
-
-terraform {
-  required_providers {
-    yandex = {
-      source = "yandex-cloud/yandex"
-    }
-  }
-
-  # Credentials need to be sourced from creds.fish
-  backend "s3" {
-    endpoint = "storage.yandexcloud.net"
-    bucket   = "su-tvl-terraform-state"
-    region   = "ru-central1"
-    key      = "corp/ops/terraform.tfstate"
-
-    skip_region_validation      = true
-    skip_credentials_validation = true
-  }
-}
-
-provider "yandex" {
-  zone = "ru-central1-b"
-}
-
-locals {
-  tvl_cloud_id  = "b1ggu5m1btue982app12"
-  tvl_folder_id = "b1gmbeqt9o5kbl7rclln"
-  rih_cloud_id  = "b1glccvcqggi2ruibgvt"
-  rih_folder_id = "b1gsavcrsjn059d1sbh9"
-}
-
-# Storage state bucket configuration
-
-resource "yandex_iam_service_account" "tf_state_sa" {
-  folder_id = local.tvl_folder_id
-  name      = "terraform-state"
-}
-
-resource "yandex_resourcemanager_folder_iam_member" "tf_state_sa_storage" {
-  folder_id = local.tvl_folder_id
-  role      = "storage.editor"
-  member    = "serviceAccount:${yandex_iam_service_account.tf_state_sa.id}"
-}
-
-resource "yandex_iam_service_account_static_access_key" "tf_state_sa_key" {
-  service_account_id = yandex_iam_service_account.tf_state_sa.id
-  description        = "Static access key for Terraform state"
-}
-
-resource "yandex_storage_bucket" "tf_state" {
-  access_key = yandex_iam_service_account_static_access_key.tf_state_sa_key.access_key
-  secret_key = yandex_iam_service_account_static_access_key.tf_state_sa_key.secret_key
-  bucket     = "su-tvl-terraform-state"
-}
-
-resource "yandex_dns_zone" "russiaishiring_com" {
-  name      = "russiaishiring-com"
-  zone      = "russiaishiring.com."
-  public    = true
-  folder_id = local.rih_folder_id
-}
-
-# Secret management configuration
-
-resource "yandex_kms_symmetric_key" "tvl_credentials_key" {
-  name              = "tvl-credentials"
-  folder_id         = local.tvl_folder_id
-  default_algorithm = "AES_256"
-  rotation_period   = "2160h" # 90 days
-}
-
-resource "yandex_kms_secret_ciphertext" "tf_state_key" {
-  key_id    = yandex_kms_symmetric_key.tvl_credentials_key.id
-  plaintext = yandex_iam_service_account_static_access_key.tf_state_sa_key.secret_key
-}