Skip to content

Commit 982bed8

Browse files
akerlakerl
committed
update state
1 parent fc3a7ee commit 982bed8

File tree

3 files changed

+495
-9
lines changed

3 files changed

+495
-9
lines changed

‎servers.tf

+8
Original file line numberDiff line numberDiff line change
@@ -98,6 +98,14 @@ module "heracles_validation" {
9898
zone_id = module.zones["a-rwx.org"].zone_id
9999
}
100100

101+
module "ledgerdb_validation" {
102+
source = "armorfret/r53-certbot/aws"
103+
version = "0.6.4"
104+
admin_email = var.admin_email
105+
cert_name = "ledgerdb.servers.home.a-rwx.org"
106+
zone_id = module.zones["a-rwx.org"].zone_id
107+
}
108+
101109
module "grafana_validation" {
102110
source = "armorfret/r53-certbot/aws"
103111
version = "0.6.4"

‎terraform.tfstate

+205-6
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"version": 4,
33
"terraform_version": "1.5.7",
4-
"serial": 12875,
4+
"serial": 12880,
55
"lineage": "6a6e3f47-d4c8-46eb-a34e-885062b7c62a",
66
"outputs": {
77
"domains": {
@@ -5204,6 +5204,7 @@
52045204
"sensitive_attributes": [],
52055205
"private": "eyJzY2hlbWFfdmVyc2lvbiI6IjIifQ==",
52065206
"dependencies": [
5207+
"aws_route53_delegation_set.main",
52075208
"data.terraform_remote_state.unifi",
52085209
"module.zones.aws_route53_zone.this"
52095210
]
@@ -13153,7 +13154,7 @@
1315313154
],
1315413155
"primary_name_server": "ns-1505.awsdns-60.org",
1315513156
"private_zone": false,
13156-
"resource_record_set_count": 193,
13157+
"resource_record_set_count": 195,
1315713158
"tags": {},
1315813159
"vpc_id": null,
1315913160
"zone_id": "Z06324102J3IVSSCKNZ4A"
@@ -13413,7 +13414,7 @@
1341313414
],
1341413415
"primary_name_server": "ns-1505.awsdns-60.org",
1341513416
"private_zone": false,
13416-
"resource_record_set_count": 193,
13417+
"resource_record_set_count": 195,
1341713418
"tags": {},
1341813419
"vpc_id": null,
1341913420
"zone_id": "Z06324102J3IVSSCKNZ4A"
@@ -38312,7 +38313,7 @@
3831238313
"name": "certbot_heracles.servers.home.a-rwx.org",
3831338314
"path": "/",
3831438315
"permissions_boundary": "",
38315-
"tags": null,
38316+
"tags": {},
3831638317
"tags_all": {},
3831738318
"unique_id": "AIDA3D3X4QXY5553ZEJRS"
3831838319
},
@@ -38340,8 +38341,10 @@
3834038341
"sensitive_attributes": [],
3834138342
"private": "bnVsbA==",
3834238343
"dependencies": [
38344+
"aws_route53_delegation_set.main",
3834338345
"module.heracles_validation.aws_iam_user.this",
38344-
"module.heracles_validation.data.aws_iam_policy_document.certbot_validation"
38346+
"module.heracles_validation.data.aws_iam_policy_document.certbot_validation",
38347+
"module.zones.aws_route53_zone.this"
3834538348
]
3834638349
}
3834738350
]
@@ -38382,6 +38385,7 @@
3838238385
"sensitive_attributes": [],
3838338386
"private": "eyJzY2hlbWFfdmVyc2lvbiI6IjIifQ==",
3838438387
"dependencies": [
38388+
"aws_route53_delegation_set.main",
3838538389
"module.zones.aws_route53_zone.this"
3838638390
]
3838738391
}
@@ -38607,6 +38611,201 @@
3860738611
}
3860838612
]
3860938613
},
38614+
{
38615+
"module": "module.ledgerdb_validation",
38616+
"mode": "data",
38617+
"type": "aws_iam_policy_document",
38618+
"name": "certbot_validation",
38619+
"provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
38620+
"instances": [
38621+
{
38622+
"schema_version": 0,
38623+
"attributes": {
38624+
"id": "2492239216",
38625+
"json": "{\n \"Version\": \"2012-10-17\",\n \"Statement\": [\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"route53:ListHostedZonesByName\",\n \"route53:ListHostedZones\",\n \"route53:GetChange\"\n ],\n \"Resource\": \"*\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": [\n \"route53:ListResourceRecordSets\",\n \"route53:GetHostedZone\"\n ],\n \"Resource\": \"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\"\n },\n {\n \"Effect\": \"Allow\",\n \"Action\": \"route53:ChangeResourceRecordSets\",\n \"Resource\": \"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\",\n \"Condition\": {\n \"ForAllValues:StringEquals\": {\n \"route53:ChangeResourceRecordSetsNormalizedRecordNames\": \"_acme-challenge.ledgerdb.servers.home.a-rwx.org\"\n }\n }\n }\n ]\n}",
38626+
"minified_json": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Action\":[\"route53:ListHostedZonesByName\",\"route53:ListHostedZones\",\"route53:GetChange\"],\"Resource\":\"*\"},{\"Effect\":\"Allow\",\"Action\":[\"route53:ListResourceRecordSets\",\"route53:GetHostedZone\"],\"Resource\":\"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\"},{\"Effect\":\"Allow\",\"Action\":\"route53:ChangeResourceRecordSets\",\"Resource\":\"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\",\"Condition\":{\"ForAllValues:StringEquals\":{\"route53:ChangeResourceRecordSetsNormalizedRecordNames\":\"_acme-challenge.ledgerdb.servers.home.a-rwx.org\"}}}]}",
38627+
"override_json": null,
38628+
"override_policy_documents": null,
38629+
"policy_id": null,
38630+
"source_json": null,
38631+
"source_policy_documents": null,
38632+
"statement": [
38633+
{
38634+
"actions": [
38635+
"route53:GetChange",
38636+
"route53:ListHostedZones",
38637+
"route53:ListHostedZonesByName"
38638+
],
38639+
"condition": [],
38640+
"effect": "Allow",
38641+
"not_actions": [],
38642+
"not_principals": [],
38643+
"not_resources": [],
38644+
"principals": [],
38645+
"resources": [
38646+
"*"
38647+
],
38648+
"sid": ""
38649+
},
38650+
{
38651+
"actions": [
38652+
"route53:GetHostedZone",
38653+
"route53:ListResourceRecordSets"
38654+
],
38655+
"condition": [],
38656+
"effect": "Allow",
38657+
"not_actions": [],
38658+
"not_principals": [],
38659+
"not_resources": [],
38660+
"principals": [],
38661+
"resources": [
38662+
"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A"
38663+
],
38664+
"sid": ""
38665+
},
38666+
{
38667+
"actions": [
38668+
"route53:ChangeResourceRecordSets"
38669+
],
38670+
"condition": [
38671+
{
38672+
"test": "ForAllValues:StringEquals",
38673+
"values": [
38674+
"_acme-challenge.ledgerdb.servers.home.a-rwx.org"
38675+
],
38676+
"variable": "route53:ChangeResourceRecordSetsNormalizedRecordNames"
38677+
}
38678+
],
38679+
"effect": "Allow",
38680+
"not_actions": [],
38681+
"not_principals": [],
38682+
"not_resources": [],
38683+
"principals": [],
38684+
"resources": [
38685+
"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A"
38686+
],
38687+
"sid": ""
38688+
}
38689+
],
38690+
"version": "2012-10-17"
38691+
},
38692+
"sensitive_attributes": []
38693+
}
38694+
]
38695+
},
38696+
{
38697+
"module": "module.ledgerdb_validation",
38698+
"mode": "managed",
38699+
"type": "aws_iam_user",
38700+
"name": "this",
38701+
"provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
38702+
"instances": [
38703+
{
38704+
"schema_version": 0,
38705+
"attributes": {
38706+
"arn": "arn:aws:iam::764218738161:user/certbot_ledgerdb.servers.home.a-rwx.org",
38707+
"force_destroy": false,
38708+
"id": "certbot_ledgerdb.servers.home.a-rwx.org",
38709+
"name": "certbot_ledgerdb.servers.home.a-rwx.org",
38710+
"path": "/",
38711+
"permissions_boundary": "",
38712+
"tags": null,
38713+
"tags_all": {},
38714+
"unique_id": "AIDA3D3X4QXYSR3IJT72U"
38715+
},
38716+
"sensitive_attributes": [],
38717+
"private": "bnVsbA=="
38718+
}
38719+
]
38720+
},
38721+
{
38722+
"module": "module.ledgerdb_validation",
38723+
"mode": "managed",
38724+
"type": "aws_iam_user_policy",
38725+
"name": "this",
38726+
"provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
38727+
"instances": [
38728+
{
38729+
"schema_version": 0,
38730+
"attributes": {
38731+
"id": "certbot_ledgerdb.servers.home.a-rwx.org:certbot_ledgerdb.servers.home.a-rwx.org",
38732+
"name": "certbot_ledgerdb.servers.home.a-rwx.org",
38733+
"name_prefix": "",
38734+
"policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"route53:ListHostedZonesByName\",\"route53:ListHostedZones\",\"route53:GetChange\"],\"Effect\":\"Allow\",\"Resource\":\"*\"},{\"Action\":[\"route53:ListResourceRecordSets\",\"route53:GetHostedZone\"],\"Effect\":\"Allow\",\"Resource\":\"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\"},{\"Action\":\"route53:ChangeResourceRecordSets\",\"Condition\":{\"ForAllValues:StringEquals\":{\"route53:ChangeResourceRecordSetsNormalizedRecordNames\":\"_acme-challenge.ledgerdb.servers.home.a-rwx.org\"}},\"Effect\":\"Allow\",\"Resource\":\"arn:aws:route53:::hostedzone/Z06324102J3IVSSCKNZ4A\"}]}",
38735+
"user": "certbot_ledgerdb.servers.home.a-rwx.org"
38736+
},
38737+
"sensitive_attributes": [],
38738+
"private": "bnVsbA==",
38739+
"dependencies": [
38740+
"module.ledgerdb_validation.aws_iam_user.this",
38741+
"module.ledgerdb_validation.data.aws_iam_policy_document.certbot_validation"
38742+
]
38743+
}
38744+
]
38745+
},
38746+
{
38747+
"module": "module.ledgerdb_validation",
38748+
"mode": "managed",
38749+
"type": "aws_route53_record",
38750+
"name": "caa",
38751+
"provider": "provider[\"registry.terraform.io/hashicorp/aws\"]",
38752+
"instances": [
38753+
{
38754+
"schema_version": 2,
38755+
"attributes": {
38756+
"alias": [],
38757+
"allow_overwrite": null,
38758+
"cidr_routing_policy": [],
38759+
"failover_routing_policy": [],
38760+
"fqdn": "ledgerdb.servers.home.a-rwx.org",
38761+
"geolocation_routing_policy": [],
38762+
"geoproximity_routing_policy": [],
38763+
"health_check_id": "",
38764+
"id": "Z06324102J3IVSSCKNZ4A_ledgerdb.servers.home.a-rwx.org_CAA",
38765+
"latency_routing_policy": [],
38766+
"multivalue_answer_routing_policy": false,
38767+
"name": "ledgerdb.servers.home.a-rwx.org",
38768+
"records": [
38769+
"0 iodef \"mailto:[email protected]\"",
38770+
"0 issue \"letsencrypt.org; validationmethods=dns-01\"",
38771+
"0 issuewild \";\""
38772+
],
38773+
"set_identifier": "",
38774+
"ttl": 60,
38775+
"type": "CAA",
38776+
"weighted_routing_policy": [],
38777+
"zone_id": "Z06324102J3IVSSCKNZ4A"
38778+
},
38779+
"sensitive_attributes": [],
38780+
"private": "eyJzY2hlbWFfdmVyc2lvbiI6IjIifQ==",
38781+
"dependencies": [
38782+
"module.zones.aws_route53_zone.this"
38783+
]
38784+
}
38785+
]
38786+
},
38787+
{
38788+
"module": "module.ledgerdb_validation",
38789+
"mode": "managed",
38790+
"type": "awscreds_iam_access_key",
38791+
"name": "this",
38792+
"provider": "provider[\"registry.terraform.io/armorfret/awscreds\"]",
38793+
"instances": [
38794+
{
38795+
"schema_version": 0,
38796+
"attributes": {
38797+
"file": "creds/certbot_ledgerdb.servers.home.a-rwx.org",
38798+
"id": "AKIA3D3X4QXY4AC7UHLQ",
38799+
"user": "certbot_ledgerdb.servers.home.a-rwx.org"
38800+
},
38801+
"sensitive_attributes": [],
38802+
"private": "bnVsbA==",
38803+
"dependencies": [
38804+
"module.ledgerdb_validation.aws_iam_user.this"
38805+
]
38806+
}
38807+
]
38808+
},
3861038809
{
3861138810
"module": "module.logs_ext_validation",
3861238811
"mode": "data",
@@ -39997,7 +40196,7 @@
3999740196
"name": "puppet-heracles",
3999840197
"path": "/",
3999940198
"permissions_boundary": "",
40000-
"tags": null,
40199+
"tags": {},
4000140200
"tags_all": {},
4000240201
"unique_id": "AIDA3D3X4QXY4Y763IBI3"
4000340202
},

0 commit comments

Comments
 (0)