+ acm + rds
This commit is contained in:
289
services/rds/composition.yaml.stop
Normal file
289
services/rds/composition.yaml.stop
Normal file
@@ -0,0 +1,289 @@
|
||||
apiVersion: apiextensions.crossplane.io/v1
|
||||
kind: Composition
|
||||
metadata:
|
||||
name: rds-composition
|
||||
labels:
|
||||
crossplane/provider: default
|
||||
crossplane/xrd: xrdss.crossplane.evina
|
||||
spec:
|
||||
compositeTypeRef:
|
||||
apiVersion: crossplane.evina/v1alpha1
|
||||
kind: XRDS
|
||||
patchSets:
|
||||
- name: region
|
||||
patches:
|
||||
- type: FromCompositeFieldPath
|
||||
fromFieldPath: spec.parameters.region
|
||||
toFieldPath: spec.forProvider.region
|
||||
- name: providerConfigRef
|
||||
patches:
|
||||
- type: FromCompositeFieldPath
|
||||
fromFieldPath: spec.parameters.providerConfigRef
|
||||
toFieldPath: spec.providerConfigRef.name
|
||||
writeConnectionSecretsToNamespace: crossplane
|
||||
resources:
|
||||
###################################################################################################
|
||||
- name: Role
|
||||
base:
|
||||
apiVersion: iam.aws.upbound.io/v1beta1
|
||||
kind: Role
|
||||
metadata:
|
||||
labels:
|
||||
claim: rds
|
||||
provider: iam
|
||||
kind: role
|
||||
app: mathodprotect
|
||||
environment: dev
|
||||
spec:
|
||||
forProvider:
|
||||
assumeRolePolicy: |
|
||||
{
|
||||
"Version": "2012-10-17",
|
||||
"Statement": [
|
||||
{
|
||||
"Action": "sts:AssumeRole",
|
||||
"Effect": "Allow",
|
||||
"Principal": {
|
||||
"Service": "rds.amazonaws.com"
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
tags:
|
||||
region: eu-west-1
|
||||
app: mathodprotect
|
||||
environment: dev
|
||||
account: "169590266381"
|
||||
composition: rds
|
||||
managedResources: role
|
||||
patches:
|
||||
- type: PatchSet
|
||||
patchSetName: providerConfigRef
|
||||
- type: CombineFromComposite
|
||||
combine:
|
||||
variables:
|
||||
- fromFieldPath: spec.parameters.app
|
||||
- fromFieldPath: spec.parameters.environment
|
||||
strategy: string
|
||||
string:
|
||||
fmt: "rds-iam-role-%s-%s"
|
||||
toFieldPath: "metadata.annotations[crossplane.io/external-name]"
|
||||
###################################################################################################
|
||||
# - name: Cluster
|
||||
# base:
|
||||
# apiVersion: rds.aws.upbound.io/v1beta1
|
||||
# kind: Cluster
|
||||
# metadata:
|
||||
# name: cluster-mathodprotect-dev
|
||||
# labels:
|
||||
# resources: Cluster
|
||||
# spec:
|
||||
# forProvider:
|
||||
# availabilityZones:
|
||||
# - eu-west-1a
|
||||
# - eu-west-1b
|
||||
# - eu-west-1c
|
||||
# engine: aurora-mysql
|
||||
# engineMode: provisioned
|
||||
# engineVersion: 5.7.mysql_aurora.2.11.2
|
||||
# databaseName: mathodProtect
|
||||
# autoGeneratePassword: true
|
||||
# masterPasswordSecretRef:
|
||||
# key: tropsecure
|
||||
# name: cluster-mathodprotect-dev-password
|
||||
# namespace: crossplane-system
|
||||
# port: 3306
|
||||
# dbClusterParameterGroupName: clusterparametergroup-mathodprotect-dev
|
||||
# # iamRoles:
|
||||
# # - arn:aws:iam::453702081005:role/IAM-Role-Aurora
|
||||
# # vpcSecurityGroupIds:
|
||||
# # - sg-0292740ac642cbce9
|
||||
# vpcSecurityGroupIdRefs:
|
||||
# - name: securitygroup-mathodprotect-dev
|
||||
# masterUsername: mathod
|
||||
# copyTagsToSnapshot: true
|
||||
# finalSnapshotIdentifier: test-final
|
||||
# dbSubnetGroupName: subnetgroup-mathodprotect-dev
|
||||
# # dbSubnetGroupNameRef:
|
||||
# backupRetentionPeriod: 1
|
||||
# preferredBackupWindow: 23:48-00:18
|
||||
# preferredMaintenanceWindow: tue:22:51-tue:23:21
|
||||
# tags:
|
||||
# region: eu-west-1
|
||||
# project: mathodprotect
|
||||
# environment: dev
|
||||
# account: "169590266381"
|
||||
# composition: rds
|
||||
# managedResources: cluster
|
||||
# writeConnectionSecretToRef:
|
||||
# name: rds-mathod-protect-password
|
||||
# namespace: crossplane-system
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: SubnetGroup
|
||||
# base:
|
||||
# apiVersion: rds.aws.upbound.io/v1beta1
|
||||
# kind: SubnetGroup
|
||||
# metadata:
|
||||
# name: subnetgroup-mathodprotect-dev
|
||||
# labels:
|
||||
# resource: SubnetGroup
|
||||
# spec:
|
||||
# forProvider:
|
||||
# subnetIds: # Replace to use subnetIdRefs
|
||||
# - subnet-0c0a38354f2a028c8
|
||||
# - subnet-06dc47da5b4eae974
|
||||
# - subnet-0f3ee2a757ce85ad1
|
||||
# # subnetIdRefs:
|
||||
# tags:
|
||||
# region: eu-west-1
|
||||
# project: mathodprotect
|
||||
# environment: dev
|
||||
# account: "169590266381"
|
||||
# composition: rds
|
||||
# managedResources: subnetgroup
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: ClusterInstance
|
||||
# base:
|
||||
# apiVersion: rds.aws.upbound.io/v1beta1
|
||||
# kind: ClusterInstance
|
||||
# metadata:
|
||||
# name: clusterinstance-mathodprotect-dev
|
||||
# labels:
|
||||
# resources: ClusterInstance
|
||||
# spec:
|
||||
# forProvider:
|
||||
# # clusterIdentifier: cluster-mathodprotect-dev
|
||||
# # id: backoffice-staging-eu-west-1-aurora-cluster-instance-0
|
||||
# clusterIdentifierRef:
|
||||
# name: cluster-mathodprotect-dev
|
||||
# engine: aurora-mysql
|
||||
# instanceClass: db.t3.medium
|
||||
# publiclyAccessible: false
|
||||
# caCertIdentifier: rds-ca-2019
|
||||
# # dbParameterGroupName:
|
||||
# dbParameterGroupNameRef:
|
||||
# name: parametergroup-mathodprotect-dev
|
||||
# # dbSubnetGroupName:
|
||||
# dbSubnetGroupNameRef:
|
||||
# name: subnetgroup-mathodprotect-dev
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: ClusterParameterGroup
|
||||
# base:
|
||||
# apiVersion: rds.aws.upbound.io/v1beta1
|
||||
# kind: ClusterParameterGroup
|
||||
# metadata:
|
||||
# name: clusterparametergroup-mathodprotect-dev
|
||||
# labels:
|
||||
# resources: ClusterParameterGroup
|
||||
# spec:
|
||||
# forProvider:
|
||||
# family: aurora-mysql5.7
|
||||
# parameter:
|
||||
# - applyMethod: immediate
|
||||
# name: aurora_load_from_s3_role
|
||||
# value: arn:aws:iam::169590266381:role/role-mathodprotect-dev
|
||||
# - applyMethod: immediate
|
||||
# name: aurora_select_into_s3_role
|
||||
# value: arn:aws:iam::169590266381:role/role-mathodprotect-dev
|
||||
# - applyMethod: immediate
|
||||
# name: aws_default_s3_role
|
||||
# value: arn:aws:iam::169590266381:role/role-mathodprotect-dev
|
||||
# - applyMethod: immediate
|
||||
# name: innodb_online_alter_log_max_size
|
||||
# value: "21474836480"
|
||||
# - applyMethod: immediate
|
||||
# name: slow_query_log
|
||||
# value: "1"
|
||||
# tags:
|
||||
# region: eu-west-1
|
||||
# app: mathodprotect
|
||||
# environment: dev
|
||||
# account: "169590266381"
|
||||
# composition: rds
|
||||
# managedResources: clusterparametergroup
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: ParameterGroup
|
||||
# base:
|
||||
# apiVersion: rds.aws.upbound.io/v1beta1
|
||||
# kind: ParameterGroup
|
||||
# metadata:
|
||||
# name: parametergroup-mathodprotect-dev
|
||||
# labels:
|
||||
# resources: ParameterGroup
|
||||
# spec:
|
||||
# forProvider:
|
||||
# family: aurora-mysql5.7
|
||||
# tags:
|
||||
# region: eu-west-1
|
||||
# app: mathodprotect
|
||||
# environment: dev
|
||||
# account: "169590266381"
|
||||
# composition: rds
|
||||
# managedResources: parametergroup
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: SecurityGroup
|
||||
# base:
|
||||
# apiVersion: ec2.aws.upbound.io/v1beta1
|
||||
# kind: SecurityGroup
|
||||
# metadata:
|
||||
# name: securitygroup-mathodprotect-dev
|
||||
# spec:
|
||||
# forProvider:
|
||||
# name: securitygroup-mathodprotect-dev
|
||||
# vpcId: vpc-029aa16a171ccb018
|
||||
# # vpcIdRef:
|
||||
# tags:
|
||||
# region: eu-west-1
|
||||
# app: mathodprotect
|
||||
# environment: dev
|
||||
# account: "169590266381"
|
||||
# composition: rds
|
||||
# managedResources: securitygroup
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
###################################################################################################
|
||||
# - name: SecurityGroupEgressRule
|
||||
# base:
|
||||
# apiVersion: ec2.aws.upbound.io/v1beta1
|
||||
# kind: SecurityGroupEgressRule
|
||||
# metadata:
|
||||
# name: securitygroupegressrule-mathodprotect-dev
|
||||
# spec:
|
||||
# forProvider:
|
||||
# cidrIpv4: 0.0.0.0/0
|
||||
# ipProtocol: "-1"
|
||||
# securityGroupIdRef:
|
||||
# name: securitygroup-mathodprotect-dev
|
||||
# patches:
|
||||
# - type: PatchSet
|
||||
# patchSetName: region
|
||||
# - type: PatchSet
|
||||
# patchSetName: providerConfigRef
|
||||
Reference in New Issue
Block a user