Resources and access

storage/main.tf

@@ -31,29 +31,25 @@ resource "minio_ilm_policy" "admin_policy" {
   }
 }
 
-resource "minio_s3_bucket" "backups" {
-  bucket = module.config.silo.backup_bucket
-  acl    = "private"
+module "bucket" {
+  source          = "../modules/bucket"
+  for_each        = module.config.buckets
+  name            = each.key
+  versioning      = each.value.versioning
+  noncurrent_days = each.value.noncurrent_days
+  expire_days     = each.value.expire_days
 }
 
-resource "minio_ilm_policy" "backups" {
-  bucket = minio_s3_bucket.backups.bucket
-
-  rule {
-    id         = "expire-old-backups"
-    status     = "Enabled"
-    expiration = "30d"
-  }
-}
-
-module "app_storage" {
-  source   = "../modules/app-storage"
-  for_each = local.services_with_buckets
-  service  = { name = each.key, buckets = each.value.buckets }
+module "bucket_access" {
+  source     = "../modules/bucket-access"
+  for_each   = module.config.service_buckets
+  name       = each.key
+  read_write = [for bucket in each.value.read_write : module.bucket[bucket].name]
+  read_only  = [for bucket in each.value.read_only : module.bucket[bucket].name]
 }
 
 resource "vault_kv_secret_v2" "s3" {
-  for_each            = module.app_storage
+  for_each            = module.bucket_access
   mount               = module.config.vault.mount
   name                = "${each.key}/s3"
   delete_all_versions = true