convox_installer 1.0.8 → 3.0.0

data/terraform/s3_bucket.tf.erb

@@ -0,0 +1,73 @@
+# AWS provider version is 3.33.0
+# https://registry.terraform.io/providers/hashicorp/aws/3.33.0
+
+provider "aws" {
+  region = "<%= config[:aws_region] %>"
+}
+
+resource "aws_kms_key" "docs_kms_key" {
+  description             = "This key is used to encrypt objects in the DocSpring S3 bucket"
+  deletion_window_in_days = 14
+}
+
+# Later versions of aws provider (e.g. 4.8.0) use separate resources for 
+# aws_s3_bucket_acl and aws_s3_bucket_cors_configuration.
+# This will need to be updated in the future.
+resource "aws_s3_bucket" "docs_s3_bucket" {
+  bucket = "<%= config.fetch(:stack_name) %>-<%= config.fetch(:s3_bucket_name) %>"
+  acl   = "private"
+
+  server_side_encryption_configuration {
+    rule {
+      apply_server_side_encryption_by_default {
+        kms_master_key_id = aws_kms_key.docs_kms_key.arn
+        sse_algorithm     = "aws:kms"
+      }
+    }
+  }
+
+  <%= config[:s3_bucket_cors_rule] %>
+}
+
+resource "aws_iam_user" "docspring_s3_user" {
+  name = "<%= config.fetch(:stack_name) %>-<%= config.fetch(:s3_bucket_name) %>"
+}
+
+resource "aws_iam_access_key" "docspring_user_access_key" {
+  user = aws_iam_user.docspring_s3_user.name
+}
+
+resource "aws_iam_user_policy" "docspring_user_s3_policy" {
+  name = "docspring_user_s3_policy"
+  user = aws_iam_user.docspring_s3_user.name
+
+  policy = jsonencode({
+    "Version": "2012-10-17",
+    "Statement": [
+      {
+        "Effect": "Allow",
+        "Action": [
+            "s3:PutObject",
+            "s3:PutObjectAcl",
+            "s3:GetObject",
+            "s3:GetObjectAcl",
+            "s3:DeleteObject"
+        ],
+        "Resource": [
+          "arn:aws:s3:::<%= config.fetch(:stack_name) %>-<%= config.fetch(:s3_bucket_name) %>/*",
+        ]
+      },
+      {
+        "Effect": "Allow",
+        "Action": [
+          "kms:Encrypt",
+          "kms:Decrypt",
+          "kms:ReEncrypt*",
+          "kms:GenerateDataKey*",
+          "kms:DescribeKey"
+        ],
+        "Resource": "*"
+      }
+    ]
+  })
+}

metadata

@@ -1,85 +1,85 @@
 --- !ruby/object:Gem::Specification
 name: convox_installer
 version: !ruby/object:Gem::Version
-  version: 1.0.8
+  version: 3.0.0
 platform: ruby
 authors:
 - Form Applications Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2021-11-12 00:00:00.000000000 Z
+date: 2022-04-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
-  name: highline
+  name: activesupport
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.7.10
+        version: 5.2.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.7.10
+        version: 5.2.3
 - !ruby/object:Gem::Dependency
-  name: json
+  name: highline
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.2.0
+        version: 1.7.10
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.2.0
+        version: 1.7.10
 - !ruby/object:Gem::Dependency
-  name: os
+  name: httparty
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 0.17.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 1.0.1
+        version: 0.17.0
 - !ruby/object:Gem::Dependency
-  name: httparty
+  name: json
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.17.0
+        version: 2.2.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 0.17.0
+        version: 2.2.0
 - !ruby/object:Gem::Dependency
-  name: activesupport
+  name: os
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: 1.0.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 5.2.3
+        version: 1.0.1
 description: Build a Convox installation workflow
 email:
 - support@formapi.io
@@ -109,10 +109,14 @@ files:
 - spec/lib/convox_installer/config_spec.rb
 - spec/lib/convox_installer/requirements_spec.rb
 - spec/spec_helper.rb
+- terraform/elasticache.tf.erb
+- terraform/rds.tf.erb
+- terraform/s3_bucket.tf.erb
 homepage: https://github.com/FormAPI/convox_installer
 licenses:
 - MIT
-metadata: {}
+metadata:
+  rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: []
 require_paths:
@@ -121,7 +125,7 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '2.3'
+      version: '2.5'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="