feat(terraform): updated configs for yc lab

This commit is contained in:
ITQ
2026-08-18 23:11:31 +03:00
parent d9105dee7b
commit 48f67a284e
13 changed files with 101 additions and 25 deletions
+23
View File
@@ -0,0 +1,23 @@
resource "yandex_api_gateway" "frontend" {
name = "frontend"
description = "API Gateway for frontend"
execution_timeout = "300"
connectivity {
network_id = yandex_vpc_network.default.id
}
custom_domains {
fqdn = local.final_frontend_domain
certificate_id = yandex_cm_certificate.default.id
}
log_options {
log_group_id = yandex_logging_group.api_gateway.id
min_level = "INFO"
}
spec = templatefile("${path.module}/configs/api_gateway/spec.yaml", {
bucket_name = yandex_storage_bucket.frontend.bucket
})
}
+11
View File
@@ -0,0 +1,11 @@
resource "yandex_cm_certificate" "default" {
name = replace(lower(var.domain), ".", "-")
description = "Default certificate for all resources"
deletion_protection = true
domains = tolist([var.domain, "*.${var.domain}"])
managed {
challenge_type = "DNS_CNAME"
}
}
+34
View File
@@ -0,0 +1,34 @@
resource "yandex_storage_bucket" "frontend" {
bucket = local.final_frontend_domain
default_storage_class = "STANDARD"
force_destroy = false
max_size = 104857600
anonymous_access_flags {
config_read = false
list = true
read = true
}
}
resource "yandex_storage_bucket" "frontend_develop" {
bucket = local.final_frontend_develop_domain
default_storage_class = "STANDARD"
force_destroy = false
max_size = 104857600
anonymous_access_flags {
config_read = false
list = true
read = true
}
}
resource "yandex_storage_bucket_iam_binding" "frontend_bucket_push" {
bucket = yandex_storage_bucket.frontend.bucket
role = "storage.editor"
members = [
"serviceAccount:${yandex_iam_service_account.frontend_push_sa.id}",
]
}