zydronium/google-nomulus
1
0
Fork 0
mirror of https://github.com/google/nomulus.git synced 2025-05-01 04:27:51 +02:00
Code Issues Projects Releases Packages Wiki Activity

Format terraform files

Browse source 
For some reason the auto-formatting didn't happen when these files are first checked in.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=191589487
This commit is contained in:
jianglai 2018-04-04 07:36:05 -07:00 • committed by Ben McIlwain
parent e7f033201b
commit 4c06b36118
9 changed files with 105 additions and 87 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
java/google/registry/proxy/terraform/example_config.tf
View file

@ -7,11 +7,11 @@ terraform {
} }
module "proxy" { module "proxy" {
source = "../../modules" source = "../../modules"
proxy_project_name = "YOUR_PROXY_PROJECT" proxy_project_name = "YOUR_PROXY_PROJECT"
nomulus_project_name = "YOUR_NOMULUS_GPROJECT" nomulus_project_name = "YOUR_NOMULUS_GPROJECT"
gcr_project_name = "YOUR_GCR_PROJECT" gcr_project_name = "YOUR_GCR_PROJECT"
proxy_domain_name = "YOUR_PROXY_DOMAIN" proxy_domain_name = "YOUR_PROXY_DOMAIN"
} }
output "proxy_service_account_client_id" { output "proxy_service_account_client_id" {
@ -28,8 +28,7 @@ output "proxy_instance_groups" {
output "proxy_ip_addresses" { output "proxy_ip_addresses" {
value = { value = {
ipv4 = "${module.proxy.proxy_ipv4_address}", ipv4 = "${module.proxy.proxy_ipv4_address}"
ipv6 = "${module.proxy.proxy_ipv6_address}" ipv6 = "${module.proxy.proxy_ipv6_address}"
} }
} }

34
java/google/registry/proxy/terraform/modules/dns.tf
View file

@ -1,36 +1,36 @@
resource "google_dns_managed_zone" "proxy_domain" { resource "google_dns_managed_zone" "proxy_domain" {
name = "proxy-domain" name = "proxy-domain"
dns_name = "${var.proxy_domain_name}." dns_name = "${var.proxy_domain_name}."
} }
resource "google_dns_record_set" "proxy_epp_a_record" { resource "google_dns_record_set" "proxy_epp_a_record" {
name = "epp.${google_dns_managed_zone.proxy_domain.dns_name}" name = "epp.${google_dns_managed_zone.proxy_domain.dns_name}"
type = "A" type = "A"
ttl = 300 ttl = 300
managed_zone = "${google_dns_managed_zone.proxy_domain.name}" managed_zone = "${google_dns_managed_zone.proxy_domain.name}"
rrdatas = ["${google_compute_global_address.proxy_ipv4_address.address}"] rrdatas = ["${google_compute_global_address.proxy_ipv4_address.address}"]
} }
resource "google_dns_record_set" "proxy_epp_aaaa_record" { resource "google_dns_record_set" "proxy_epp_aaaa_record" {
name = "epp.${google_dns_managed_zone.proxy_domain.dns_name}" name = "epp.${google_dns_managed_zone.proxy_domain.dns_name}"
type = "AAAA" type = "AAAA"
ttl = 300 ttl = 300
managed_zone = "${google_dns_managed_zone.proxy_domain.name}" managed_zone = "${google_dns_managed_zone.proxy_domain.name}"
rrdatas = ["${google_compute_global_address.proxy_ipv6_address.address}"] rrdatas = ["${google_compute_global_address.proxy_ipv6_address.address}"]
} }
resource "google_dns_record_set" "proxy_whois_a_record" { resource "google_dns_record_set" "proxy_whois_a_record" {
name = "whois.${google_dns_managed_zone.proxy_domain.dns_name}" name = "whois.${google_dns_managed_zone.proxy_domain.dns_name}"
type = "A" type = "A"
ttl = 300 ttl = 300
managed_zone = "${google_dns_managed_zone.proxy_domain.name}" managed_zone = "${google_dns_managed_zone.proxy_domain.name}"
rrdatas = ["${google_compute_global_address.proxy_ipv4_address.address}"] rrdatas = ["${google_compute_global_address.proxy_ipv4_address.address}"]
} }
resource "google_dns_record_set" "proxy_whois_aaaa_record" { resource "google_dns_record_set" "proxy_whois_aaaa_record" {
name = "whois.${google_dns_managed_zone.proxy_domain.dns_name}" name = "whois.${google_dns_managed_zone.proxy_domain.dns_name}"
type = "AAAA" type = "AAAA"
ttl = 300 ttl = 300
managed_zone = "${google_dns_managed_zone.proxy_domain.name}" managed_zone = "${google_dns_managed_zone.proxy_domain.name}"
rrdatas = ["${google_compute_global_address.proxy_ipv6_address.address}"] rrdatas = ["${google_compute_global_address.proxy_ipv6_address.address}"]
} }

24
java/google/registry/proxy/terraform/modules/gke.tf
View file

@ -1,29 +1,29 @@
module "proxy_gke_americas" { module "proxy_gke_americas" {
source = "./gke" source = "./gke"
proxy_cluster_region = "americas" proxy_cluster_region = "americas"
proxy_service_account_email = "${google_service_account.proxy_service_account.email}" proxy_service_account_email = "${google_service_account.proxy_service_account.email}"
proxy_ports = "${var.proxy_ports}" proxy_ports = "${var.proxy_ports}"
} }
module "proxy_gke_emea" { module "proxy_gke_emea" {
source = "./gke" source = "./gke"
proxy_cluster_region = "emea" proxy_cluster_region = "emea"
proxy_service_account_email = "${google_service_account.proxy_service_account.email}" proxy_service_account_email = "${google_service_account.proxy_service_account.email}"
proxy_ports = "${var.proxy_ports}" proxy_ports = "${var.proxy_ports}"
} }
module "proxy_gke_apac" { module "proxy_gke_apac" {
source = "./gke" source = "./gke"
proxy_cluster_region = "apac" proxy_cluster_region = "apac"
proxy_service_account_email = "${google_service_account.proxy_service_account.email}" proxy_service_account_email = "${google_service_account.proxy_service_account.email}"
proxy_ports = "${var.proxy_ports}" proxy_ports = "${var.proxy_ports}"
} }
locals { locals {
"proxy_instance_groups" = { "proxy_instance_groups" = {
americas = "${module.proxy_gke_americas.proxy_instance_group}", americas = "${module.proxy_gke_americas.proxy_instance_group}"
emea = "${module.proxy_gke_emea.proxy_instance_group}", emea = "${module.proxy_gke_emea.proxy_instance_group}"
apac = "${module.proxy_gke_apac.proxy_instance_group}", apac = "${module.proxy_gke_apac.proxy_instance_group}"
} }
} }

21
java/google/registry/proxy/terraform/modules/gke/cluster.tf
View file

@ -7,31 +7,36 @@ data "google_container_engine_versions" "gke_version" {
} }
resource "google_container_cluster" "proxy_cluster" { resource "google_container_cluster" "proxy_cluster" {
name = "proxy-cluster-${var.proxy_cluster_region}" name = "proxy-cluster-${var.proxy_cluster_region}"
zone = "${local.proxy_cluster_zone}" zone = "${local.proxy_cluster_zone}"
node_version = "${data.google_container_engine_versions.gke_version.latest_node_version}" node_version = "${data.google_container_engine_versions.gke_version.latest_node_version}"
min_master_version = "${data.google_container_engine_versions.gke_version.latest_master_version}" min_master_version = "${data.google_container_engine_versions.gke_version.latest_master_version}"
node_pool { node_pool {
name = "proxy-node-pool" name = "proxy-node-pool"
initial_node_count = 1 initial_node_count = 1
node_config { node_config {
tags = [ tags = [
"proxy-cluster"] "proxy-cluster",
]
service_account = "${var.proxy_service_account_email}" service_account = "${var.proxy_service_account_email}"
oauth_scopes = [ oauth_scopes = [
"https://www.googleapis.com/auth/cloud-platform", "https://www.googleapis.com/auth/cloud-platform",
"https://www.googleapis.com/auth/userinfo.email" "https://www.googleapis.com/auth/userinfo.email",
] ]
} }
autoscaling { autoscaling {
max_node_count = 5 max_node_count = 5
min_node_count = 1 min_node_count = 1
} }
management { management {
auto_repair = true auto_repair = true
auto_upgrade = true auto_upgrade = true
} }
} }
} }

5
java/google/registry/proxy/terraform/modules/gke/input.tf
View file

@ -4,10 +4,11 @@ variable "proxy_cluster_region" {}
variable "proxy_cluster_zones" { variable "proxy_cluster_zones" {
type = "map" type = "map"
default = { default = {
americas = "us-east4-a" americas = "us-east4-a"
emea = "europe-west4-b" emea = "europe-west4-b"
apac = "asia-northeast1-c" apac = "asia-northeast1-c"
} }
} }

14
java/google/registry/proxy/terraform/modules/iam.tf
View file

@ -1,26 +1,26 @@
resource "google_service_account" "proxy_service_account" { resource "google_service_account" "proxy_service_account" {
account_id = "proxy-service-account" account_id = "proxy-service-account"
display_name = "Nomulus proxy service account" display_name = "Nomulus proxy service account"
} }
resource "google_project_iam_member" "nomulus_project_viewer" { resource "google_project_iam_member" "nomulus_project_viewer" {
project = "${var.nomulus_project_name}" project = "${var.nomulus_project_name}"
role = "roles/viewer" role = "roles/viewer"
member = "serviceAccount:${google_service_account.proxy_service_account.email}" member = "serviceAccount:${google_service_account.proxy_service_account.email}"
} }
resource "google_project_iam_member" "gcr_storage_viewer" { resource "google_project_iam_member" "gcr_storage_viewer" {
project = "${var.gcr_project_name}" project = "${var.gcr_project_name}"
role = "roles/storage.objectViewer" role = "roles/storage.objectViewer"
member = "serviceAccount:${google_service_account.proxy_service_account.email}" member = "serviceAccount:${google_service_account.proxy_service_account.email}"
} }
resource "google_project_iam_member" "metric_writer" { resource "google_project_iam_member" "metric_writer" {
role = "roles/monitoring.metricWriter" role = "roles/monitoring.metricWriter"
member = "serviceAccount:${google_service_account.proxy_service_account.email}" member = "serviceAccount:${google_service_account.proxy_service_account.email}"
} }
resource "google_project_iam_member" "log_writer" { resource "google_project_iam_member" "log_writer" {
role = "roles/logging.logWriter" role = "roles/logging.logWriter"
member = "serviceAccount:${google_service_account.proxy_service_account.email}" member = "serviceAccount:${google_service_account.proxy_service_account.email}"
} }

5
java/google/registry/proxy/terraform/modules/input.tf
View file

@ -23,9 +23,10 @@ variable "proxy_key" {
# Node ports exposed by the proxy. # Node ports exposed by the proxy.
variable "proxy_ports" { variable "proxy_ports" {
type = "map" type = "map"
default = { default = {
health_check = 30000 health_check = 30000
whois = 30001 whois = 30001
epp = 30002 epp = 30002
} }
} }

9
java/google/registry/proxy/terraform/modules/kms.tf
View file

@ -1,16 +1,15 @@
resource "google_kms_key_ring" "proxy_key_ring" { resource "google_kms_key_ring" "proxy_key_ring" {
name = "${var.proxy_key_ring}" name = "${var.proxy_key_ring}"
location = "global" location = "global"
} }
resource "google_kms_crypto_key" "proxy_key" { resource "google_kms_crypto_key" "proxy_key" {
name = "${var.proxy_key}" name = "${var.proxy_key}"
key_ring = "${google_kms_key_ring.proxy_key_ring.id}" key_ring = "${google_kms_key_ring.proxy_key_ring.id}"
} }
resource "google_kms_crypto_key_iam_member" "ssl_key_decrypter" { resource "google_kms_crypto_key_iam_member" "ssl_key_decrypter" {
crypto_key_id = "${google_kms_crypto_key.proxy_key.id}" crypto_key_id = "${google_kms_crypto_key.proxy_key.id}"
role = "roles/cloudkms.cryptoKeyDecrypter" role = "roles/cloudkms.cryptoKeyDecrypter"
member = "serviceAccount:${google_service_account.proxy_service_account.email}" member = "serviceAccount:${google_service_account.proxy_service_account.email}"
} }

69
java/google/registry/proxy/terraform/modules/networking.tf
View file

@ -1,31 +1,34 @@
resource "google_compute_global_address" "proxy_ipv4_address" { resource "google_compute_global_address" "proxy_ipv4_address" {
name = "proxy-ipv4-address" name = "proxy-ipv4-address"
ip_version = "IPV4" ip_version = "IPV4"
} }
resource "google_compute_global_address" "proxy_ipv6_address" { resource "google_compute_global_address" "proxy_ipv6_address" {
name = "proxy-ipv6-address" name = "proxy-ipv6-address"
ip_version = "IPV6" ip_version = "IPV6"
} }
resource "google_compute_firewall" "proxy_firewall" { resource "google_compute_firewall" "proxy_firewall" {
name = "proxy-firewall" name = "proxy-firewall"
network = "default" network = "default"
allow { allow {
protocol = "tcp" protocol = "tcp"
ports = [ ports = [
"${var.proxy_ports["epp"]}", "${var.proxy_ports["epp"]}",
"${var.proxy_ports["whois"]}", "${var.proxy_ports["whois"]}",
"${var.proxy_ports["health_check"]}"] "${var.proxy_ports["health_check"]}",
]
} }
source_ranges = [ source_ranges = [
"130.211.0.0/22", "130.211.0.0/22",
"35.191.0.0/16"] "35.191.0.0/16",
]
target_tags = [ target_tags = [
"proxy-cluster" "proxy-cluster",
] ]
} }
@ -33,84 +36,94 @@ resource "google_compute_health_check" "proxy_health_check" {
name = "proxy-health-check" name = "proxy-health-check"
tcp_health_check { tcp_health_check {
port = "${var.proxy_ports["health_check"]}" port = "${var.proxy_ports["health_check"]}"
request = "HEALTH_CHECK_REQUEST" request = "HEALTH_CHECK_REQUEST"
response = "HEALTH_CHECK_RESPONSE" response = "HEALTH_CHECK_RESPONSE"
} }
} }
resource "google_compute_backend_service" "epp_backend_service" { resource "google_compute_backend_service" "epp_backend_service" {
name = "epp-backend-service" name = "epp-backend-service"
protocol = "TCP" protocol = "TCP"
timeout_sec = 3600 timeout_sec = 3600
port_name = "epp" port_name = "epp"
backend { backend {
group = "${local.proxy_instance_groups["americas"]}" group = "${local.proxy_instance_groups["americas"]}"
} }
backend { backend {
group = "${local.proxy_instance_groups["emea"]}" group = "${local.proxy_instance_groups["emea"]}"
} }
backend { backend {
group = "${local.proxy_instance_groups["apac"]}" group = "${local.proxy_instance_groups["apac"]}"
} }
health_checks = [ health_checks = [
"${google_compute_health_check.proxy_health_check.self_link}"] "${google_compute_health_check.proxy_health_check.self_link}",
]
} }
resource "google_compute_backend_service" "whois_backend_service" { resource "google_compute_backend_service" "whois_backend_service" {
name = "whois-backend-service" name = "whois-backend-service"
protocol = "TCP" protocol = "TCP"
timeout_sec = 60 timeout_sec = 60
port_name = "whois" port_name = "whois"
backend { backend {
group = "${local.proxy_instance_groups["americas"]}" group = "${local.proxy_instance_groups["americas"]}"
} }
backend { backend {
group = "${local.proxy_instance_groups["emea"]}" group = "${local.proxy_instance_groups["emea"]}"
} }
backend { backend {
group = "${local.proxy_instance_groups["apac"]}" group = "${local.proxy_instance_groups["apac"]}"
} }
health_checks = [ health_checks = [
"${google_compute_health_check.proxy_health_check.self_link}"] "${google_compute_health_check.proxy_health_check.self_link}",
]
} }
resource "google_compute_target_tcp_proxy" "epp_tcp_proxy" { resource "google_compute_target_tcp_proxy" "epp_tcp_proxy" {
name = "epp-tcp-proxy" name = "epp-tcp-proxy"
proxy_header = "PROXY_V1" proxy_header = "PROXY_V1"
backend_service = "${google_compute_backend_service.epp_backend_service.self_link}" backend_service = "${google_compute_backend_service.epp_backend_service.self_link}"
} }
resource "google_compute_target_tcp_proxy" "whois_tcp_proxy" { resource "google_compute_target_tcp_proxy" "whois_tcp_proxy" {
name = "whois-tcp-proxy" name = "whois-tcp-proxy"
proxy_header = "PROXY_V1" proxy_header = "PROXY_V1"
backend_service = "${google_compute_backend_service.whois_backend_service.self_link}" backend_service = "${google_compute_backend_service.whois_backend_service.self_link}"
} }
resource "google_compute_global_forwarding_rule" "epp_ipv4_forwarding_rule" { resource "google_compute_global_forwarding_rule" "epp_ipv4_forwarding_rule" {
name = "epp-ipv4-forwarding-rule" name = "epp-ipv4-forwarding-rule"
ip_address = "${google_compute_global_address.proxy_ipv4_address.address}" ip_address = "${google_compute_global_address.proxy_ipv4_address.address}"
target = "${google_compute_target_tcp_proxy.epp_tcp_proxy.self_link}" target = "${google_compute_target_tcp_proxy.epp_tcp_proxy.self_link}"
port_range = "700" port_range = "700"
} }
resource "google_compute_global_forwarding_rule" "epp_ipv6_forwarding_rule" { resource "google_compute_global_forwarding_rule" "epp_ipv6_forwarding_rule" {
name = "epp-ipv6-forwarding-rule" name = "epp-ipv6-forwarding-rule"
ip_address = "${google_compute_global_address.proxy_ipv6_address.address}" ip_address = "${google_compute_global_address.proxy_ipv6_address.address}"
target = "${google_compute_target_tcp_proxy.epp_tcp_proxy.self_link}" target = "${google_compute_target_tcp_proxy.epp_tcp_proxy.self_link}"
port_range = "700" port_range = "700"
} }
resource "google_compute_global_forwarding_rule" "whois_ipv4_forwarding_rule" { resource "google_compute_global_forwarding_rule" "whois_ipv4_forwarding_rule" {
name = "whois-ipv4-forwarding-rule" name = "whois-ipv4-forwarding-rule"
ip_address = "${google_compute_global_address.proxy_ipv4_address.address}" ip_address = "${google_compute_global_address.proxy_ipv4_address.address}"
target = "${google_compute_target_tcp_proxy.whois_tcp_proxy.self_link}" target = "${google_compute_target_tcp_proxy.whois_tcp_proxy.self_link}"
port_range = "43" port_range = "43"
} }
resource "google_compute_global_forwarding_rule" "whois_ipv6_forwarding_rule" { resource "google_compute_global_forwarding_rule" "whois_ipv6_forwarding_rule" {
name = "whois-ipv6-forwarding-rule" name = "whois-ipv6-forwarding-rule"
ip_address = "${google_compute_global_address.proxy_ipv6_address.address}" ip_address = "${google_compute_global_address.proxy_ipv6_address.address}"
target = "${google_compute_target_tcp_proxy.whois_tcp_proxy.self_link}" target = "${google_compute_target_tcp_proxy.whois_tcp_proxy.self_link}"
port_range = "43" port_range = "43"
} }