update dns

Author: akerl

dns.tf

@@ -10,6 +10,7 @@ locals {
   wg_records = {
     "10.255.255.1" : "dmz",
     "10.255.255.2" : "hub",
+    "10.255.255.3" : "k8s",
     "10.255.255.4" : "metrics",
     "10.255.255.5" : "codepad",
     "10.255.255.6" : "goat",

terraform.tfstate

@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.5.7",
-  "serial": 12911,
+  "serial": 12913,
   "lineage": "6a6e3f47-d4c8-46eb-a34e-885062b7c62a",
   "outputs": {
     "domains": {
@@ -3988,6 +3988,37 @@
             "module.zones.aws_route53_zone.this"
           ]
         },
+        {
+          "index_key": "10.255.255.3",
+          "schema_version": 2,
+          "attributes": {
+            "alias": [],
+            "allow_overwrite": null,
+            "cidr_routing_policy": [],
+            "failover_routing_policy": [],
+            "fqdn": "k8s.wg0.a-rwx.org",
+            "geolocation_routing_policy": [],
+            "geoproximity_routing_policy": [],
+            "health_check_id": "",
+            "id": "Z06324102J3IVSSCKNZ4A_k8s.wg0.a-rwx.org_A",
+            "latency_routing_policy": [],
+            "multivalue_answer_routing_policy": false,
+            "name": "k8s.wg0.a-rwx.org",
+            "records": [
+              "10.255.255.3"
+            ],
+            "set_identifier": "",
+            "ttl": 60,
+            "type": "A",
+            "weighted_routing_policy": [],
+            "zone_id": "Z06324102J3IVSSCKNZ4A"
+          },
+          "sensitive_attributes": [],
+          "private": "eyJzY2hlbWFfdmVyc2lvbiI6IjIifQ==",
+          "dependencies": [
+            "module.zones.aws_route53_zone.this"
+          ]
+        },
         {
           "index_key": "10.255.255.4",
           "schema_version": 2,
@@ -40143,7 +40174,7 @@
             "name": "puppet-k8s",
             "path": "/",
             "permissions_boundary": "",
-            "tags": null,
+            "tags": {},
             "tags_all": {},
             "unique_id": "AIDA3D3X4QXYW2K6ROJOP"
           },

terraform.tfstate.backup

@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.5.7",
-  "serial": 12907,
+  "serial": 12911,
   "lineage": "6a6e3f47-d4c8-46eb-a34e-885062b7c62a",
   "outputs": {
     "domains": {
@@ -9147,6 +9147,7 @@
           "sensitive_attributes": [],
           "private": "eyJzY2hlbWFfdmVyc2lvbiI6IjIifQ==",
           "dependencies": [
+            "aws_route53_delegation_set.main",
             "data.terraform_remote_state.linode",
             "module.zones.aws_route53_zone.this"
           ]
@@ -13175,7 +13176,7 @@
             ],
             "primary_name_server": "ns-1505.awsdns-60.org",
             "private_zone": false,
-            "resource_record_set_count": 194,
+            "resource_record_set_count": 195,
             "tags": {},
             "vpc_id": null,
             "zone_id": "Z06324102J3IVSSCKNZ4A"
@@ -13435,7 +13436,7 @@
             ],
             "primary_name_server": "ns-1505.awsdns-60.org",
             "private_zone": false,
-            "resource_record_set_count": 194,
+            "resource_record_set_count": 195,
             "tags": {},
             "vpc_id": null,
             "zone_id": "Z06324102J3IVSSCKNZ4A"
@@ -40132,6 +40133,23 @@
           "sensitive_attributes": [],
           "private": "bnVsbA=="
         },
+        {
+          "index_key": "puppet-k8s",
+          "schema_version": 0,
+          "attributes": {
+            "arn": "arn:aws:iam::764218738161:user/puppet-k8s",
+            "force_destroy": false,
+            "id": "puppet-k8s",
+            "name": "puppet-k8s",
+            "path": "/",
+            "permissions_boundary": "",
+            "tags": null,
+            "tags_all": {},
+            "unique_id": "AIDA3D3X4QXYW2K6ROJOP"
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA=="
+        },
         {
           "index_key": "puppet-kiosk-office",
           "schema_version": 0,
@@ -40447,6 +40465,23 @@
             "module.puppet-vault.data.aws_iam_policy_document.path_permissions"
           ]
         },
+        {
+          "index_key": "puppet-k8s",
+          "schema_version": 0,
+          "attributes": {
+            "id": "puppet-k8s:s3-path-permissions",
+            "name": "s3-path-permissions",
+            "name_prefix": "",
+            "policy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Action\":[\"s3:PutObject\",\"s3:GetObject\",\"s3:DeleteObject\"],\"Effect\":\"Allow\",\"Resource\":[\"arn:aws:s3:::akerl-puppet/public/${aws:username}/*\",\"arn:aws:s3:::akerl-puppet/private/${aws:username}/*\"]},{\"Action\":\"s3:GetObject\",\"Effect\":\"Allow\",\"Resource\":\"arn:aws:s3:::akerl-puppet/public/*\"},{\"Action\":\"s3:ListBucket\",\"Condition\":{\"StringLike\":{\"s3:prefix\":[\"public/*\",\"private/${aws:username}/*\"]}},\"Effect\":\"Allow\",\"Resource\":\"arn:aws:s3:::akerl-puppet\"}]}",
+            "user": "puppet-k8s"
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA==",
+          "dependencies": [
+            "module.puppet-vault.aws_iam_user.servers",
+            "module.puppet-vault.data.aws_iam_policy_document.path_permissions"
+          ]
+        },
         {
           "index_key": "puppet-kiosk-office",
           "schema_version": 0,
@@ -40923,6 +40958,20 @@
             "module.puppet-vault.aws_iam_user.servers"
           ]
         },
+        {
+          "index_key": "puppet-k8s",
+          "schema_version": 0,
+          "attributes": {
+            "file": "creds/puppet-k8s",
+            "id": "AKIA3D3X4QXY3YDROUMB",
+            "user": "puppet-k8s"
+          },
+          "sensitive_attributes": [],
+          "private": "bnVsbA==",
+          "dependencies": [
+            "module.puppet-vault.aws_iam_user.servers"
+          ]
+        },
         {
           "index_key": "puppet-kiosk-office",
           "schema_version": 0,