init: initial commit

service/.env.template

@@ -0,0 +1,17 @@
+# This is just a template file, create environment variables when applying
+# Below all environment variables
+
+YC_TOKEN=
+YC_CLOUD_ID=
+YC_FOLDER_ID=
+
+# Must be the same as YC_FOLDER_ID
+TF_VAR_folder_id=
+
+AWS_BUCKET=
+AWS_BUCKET_KEY=
+AWS_ENDPOINT=
+AWS_USE_PATH_STYLE=
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=

service/.terraform.lock.hcl

@@ -0,0 +1,9 @@
+# This file is maintained automatically by "terraform init".
+# Manual edits may be lost in future updates.
+
+provider "registry.terraform.io/yandex-cloud/yandex" {
+  version = "0.147.0"
+  hashes = [
+    "h1:Lqw21/fIKjYUzc+tIcy8nSa8YAbpiYpDrjBMFwbjRYQ=",
+  ]
+}

service/backends.tf

@@ -0,0 +1,13 @@
+terraform {
+  backend "s3" {
+    use_lockfile = true
+    max_retries  = 5
+    retry_mode   = "adaptive"
+
+    skip_region_validation      = true
+    skip_credentials_validation = true
+    skip_metadata_api_check     = true
+    skip_requesting_account_id  = true
+    skip_s3_checksum            = true
+  }
+}

service/main.tf

@@ -0,0 +1,15 @@
+resource "yandex_iam_service_account" "sa" {
+  name        = "terraform-provider"
+  description = "Service account for Terraform"
+}
+
+resource "yandex_resourcemanager_folder_iam_member" "sa_admin" {
+  folder_id = var.folder_id
+  role      = "admin"
+  member    = "serviceAccount:${yandex_iam_service_account.sa.id}"
+}
+
+resource "yandex_iam_service_account_key" "sa_key" {
+  service_account_id = yandex_iam_service_account.sa.id
+  description        = "Key for Terraform"
+}

service/outputs.tf

@@ -0,0 +1,11 @@
+output "service_account_key_json" {
+  value = jsonencode({
+    id                 = yandex_iam_service_account_key.sa_key.id
+    service_account_id = yandex_iam_service_account_key.sa_key.service_account_id
+    created_at         = yandex_iam_service_account_key.sa_key.created_at
+    key_algorithm      = yandex_iam_service_account_key.sa_key.key_algorithm
+    public_key         = yandex_iam_service_account_key.sa_key.public_key
+    private_key        = yandex_iam_service_account_key.sa_key.private_key
+  })
+  sensitive = true
+}

service/provider.tf

@@ -0,0 +1,13 @@
+terraform {
+  required_providers {
+    yandex = {
+      source = "yandex-cloud/yandex"
+    }
+  }
+  required_version = ">= 0.13"
+}
+
+provider "yandex" {
+  max_retries = 3
+  insecure    = false
+}

service/variables.tf

@@ -0,0 +1 @@
+variable "folder_id" {}