02/14: cdn: Give Ludo and Ricardo administrative access.

[Chris Marusich]

marusich pushed a commit to branch master
in repository maintenance.

commit 0efa3d77a4df159ac153f66e3010426492c88981
Author: Chris Marusich <address@hidden>
Date:   Wed Dec 26 23:24:11 2018 -0800

    cdn: Give Ludo and Ricardo administrative access.
    
    * cdn/terraform/main.tf (civodul, rekado): New users.
    (administrators-membership): Add civodul and rekado as members of the
    administrators group.
    (civodul-access-key-1, rekado-access-key-1) New access keys.
    (civodul-login-profile, rekado-login-profile): New login profiles.
    (civodul-name, civodul-password, civodul-access-key-1-id)
    (civodul-access-key-1-secret, rekado-name, rekado-password)
    (rekado-access-key-1-id, rekado-access-key-1-secret): New outputs.
    * cdn/terraform/variables.tf (pgp_key_civodul, pgp_key_rekado): New
    variables.
---
 cdn/terraform/main.tf      | 57 +++++++++++++++++++++++++++
 cdn/terraform/variables.tf | 98 ++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 155 insertions(+)

diff --git a/cdn/terraform/main.tf b/cdn/terraform/main.tf
index 05948a1..3a8f0d0 100644
--- a/cdn/terraform/main.tf
+++ b/cdn/terraform/main.tf
@@ -46,6 +46,8 @@ resource "aws_iam_group_membership" 
"administrators-membership" {
   name = "administrators-membership"
   users = [
     "${aws_iam_user.marusich.name}",
+    "${aws_iam_user.civodul.name}",
+    "${aws_iam_user.rekado.name}",
   ]
   group = "${aws_iam_group.administrators.name}"
 }
@@ -84,3 +86,58 @@ output "marusich-access-key-1-secret" {
   value = "${aws_iam_access_key.marusich-access-key-1.encrypted_secret}"
 }
 
+# Ludovic Courtès <address@hidden>
+
+resource "aws_iam_user" "civodul" {
+  name = "civodul"
+  force_destroy = true
+}
+resource "aws_iam_access_key" "civodul-access-key-1" {
+  user = "${aws_iam_user.civodul.name}"
+  pgp_key = "${var.pgp_key_civodul}"
+}
+resource "aws_iam_user_login_profile" "civodul-login-profile" {
+  user    = "${aws_iam_user.civodul.name}"
+  pgp_key = "${var.pgp_key_civodul}"
+}
+
+output "civodul-name" {
+  value = "${aws_iam_user.civodul.name}"
+}
+output "civodul-password" {
+  value = 
"${aws_iam_user_login_profile.civodul-login-profile.encrypted_password}"
+}
+output "civodul-access-key-1-id" {
+  value = "${aws_iam_access_key.civodul-access-key-1.id}"
+}
+output "civodul-access-key-1-secret" {
+  value = "${aws_iam_access_key.civodul-access-key-1.encrypted_secret}"
+}
+
+# Ricardo Wurmus <address@hidden>
+
+resource "aws_iam_user" "rekado" {
+  name = "rekado"
+  force_destroy = true
+}
+resource "aws_iam_access_key" "rekado-access-key-1" {
+  user = "${aws_iam_user.rekado.name}"
+  pgp_key = "${var.pgp_key_rekado}"
+}
+resource "aws_iam_user_login_profile" "rekado-login-profile" {
+  user    = "${aws_iam_user.rekado.name}"
+  pgp_key = "${var.pgp_key_rekado}"
+}
+
+output "rekado-name" {
+  value = "${aws_iam_user.rekado.name}"
+}
+output "rekado-password" {
+  value = 
"${aws_iam_user_login_profile.rekado-login-profile.encrypted_password}"
+}
+output "rekado-access-key-1-id" {
+  value = "${aws_iam_access_key.rekado-access-key-1.id}"
+}
+output "rekado-access-key-1-secret" {
+  value = "${aws_iam_access_key.rekado-access-key-1.encrypted_secret}"
+}
diff --git a/cdn/terraform/variables.tf b/cdn/terraform/variables.tf
index e7bd64a..7734096 100644
--- a/cdn/terraform/variables.tf
+++ b/cdn/terraform/variables.tf
@@ -47,3 +47,101 @@ 
Ruzo8gIkBZAC+q2gajyfkYSJib7XWU6hTbLG0NDiFEUfu6hBSCJCqmHA2I0KgPgoNg2+aj2i4xwm
 XiIjCXrjUJCU2QNsy4hdt7/FPpiOps+LvNtWLSIi5RtJO4+Ydx7RV/9Sg9L2htBaVaxXGe4WGC0r
 EOF
 }
+
+variable "pgp_key_civodul" {
+  type = "string"
+  description = "Public PGP key for Ludovic Courtès <address@hidden>"
+  default = <<EOF
+mQINBFPo4hABEAC6adMaPpwpJiqG/Ggk0YoOdUeRX5GOOpzR2XA/SoFZu0XWuhgJInAARRKI6K9I
+O3eHCWIjeKvY+lyrxmNFlXx0Y7OH/BVK9GeL65f7996R2dCqSuhj5K6dxUzqFSHnpSDkM3t4v8L7
+vU8XKlW99DTBJT45RKyIVlSj7Ye6nsCxrMIRShbEeF5ksXAihBfXGxW5mozjvAlJCTQPoXPGb+jR
+3l8CRY4JiyvqU9IszBvkRbywC1MQsCoEOGcJsKbHnSiy+dt6QaZKvCr5qSwcEqKzfNAEKRyGouQT
+wwAak7FvZXw8GcVLU/MYGlQ1ISAzwdYxGCIM4l/4VyI38c6TbspIETR713IMsXQAn5HSxo1SZWe2
+wuQqBgjGES7UpphzV4DIpBTwv0Z8oXG9LclxkLM/ndkvMs4RX4aPqRPrJ0raJ6awfT3DbAwIMi9i
+qqbaRPIeVKgUtlB4IF8Lg8kyy3QuimmZjRZJD9l8MCYznwa1n/LbQi4Vw0Yvbd6R/6avaLqynU5K
+7SmiLYLamzOdDJR0kFEGD6nB6tjg6/kV81vV50qf8XIh4wEpW0Hu7U+q1IBA4baaVRb2JrV0gsMc
+E2ym6RA94OAi8a1Q+0dZ4V70yvwsDDR52yRmh7w3e+TEEAsXLA2frcBo0QeBdttSmg8jyKAn8Xwn
+zAKc6XrVg+GJfQARAQABtB9MdWRvdmljIENvdXJ0w6hzIDxsdWRvQGdudS5vcmc+iQJZBBMBAgBD
+AhsDBwsJCAcDAgEGFQgCCQoLBBYCAwECHgECF4ACGQEWIQQ85GRVioT9xp20DPsJCxGZPZrrtQUC
+W/QJrQUJCIHOnQAKCRAJCxGZPZrrtQy+D/0eTuN8/G6ZVAPWOnKySEGqjavMs9kLjQKic27XQp5Q
+Tby5LM+rkzaqNbXqY3mLv3WRNLSIz2FTT0QIMm5YtK1T/TAf1J9MD/dr6CLh+sJuNV+fOExjt+mE
+tuDvAqlJnCcczLER64r3WysnvieFxAr59fvNIuo7dhOwOzydKPHRX1aRYj6z/PsRmmXi24NdH3XY
+VhrNUhHjkPORl9x3rabvZj+z3CGmnTS6+SJfZ0LfQr/RyMQ1XsNSzZ4vu9xtvzr5HzpjwLJzpod2
+CZ4Jo0pj0nq1ICeo2U8e5DoGqdwBlbAUI0dD3Fz5Kh2YgfckdKpp3Mrd9xWCrJSpQhhZkaxsdxXU
+RXOGL5fqRVqLr7gyBbMZyRZjPlmaLhHPGKmRXVsPxc0BvNl4p46cpPPE72+bn2s2TtoLDELSX3CL
+bEs2Pqg2HnS3KvhbnBlc7rGB2hSyKUmTZq2jsdNPmW7K2WMR069E6uKeIefNk2iyTRxrB4/RnrQS
+gXCLDpT1Pto4PnqVcd5lpQU+mLeb+BDhDt4HJqRUosrdGm/ugmxWvvoDrHNtLjgSF4Ag2DZjhuGC
++y5yNN/R9OjsfsKl12PFgtJ/jnY3kCY0Q+XgESGvq15NF8ANxCE+2ek4lgy4pnBz1rpxBIejfbZh
+0xbdiOn0FrBh1hApBEk6jnobJ8jIE3JQwrQjTHVkb3ZpYyBDb3VydMOocyA8bHVkb0BjaGJvdWli
+Lm9yZz6JAlYEEwECAEACGwMHCwkIBwMCAQYVCAIJCgsEFgIDAQIeAQIXgBYhBDzkZFWKhP3GnbQM
++wkLEZk9muu1BQJb9AmxBQkIgc6dAAoJEAkLEZk9muu1lgIP/1jPhT6gueV3MD7TeUkQKuGllvh9
+f/JX5IemH0I/Z2nlTNFIFSS0hP6/IkFeWLgJ2EOhYwU0Nl8EgbCaItaVcJ7AWVKJGv4NTpnHHLE2
+X9JcFV9tRATB5WWikdZRHU/kMo1Po7a6/VdjdRD66Iu8AHbpZirc/wQh8WMe3qU8vUstsGnqN7Tb
+r57K3Mv1WfXSgF7tCGQ2xGZFMvcoVGcQyZoJeNn41pc3n93DNiuOco9yMA23AwgDa/niWIOLXUAJ
+baO9V6/zRTo3FnBkXOsbEMWlu+0mGS52BWVxuYzEpeBG4gkzwGMJye2h/haKsb9SOZPmOsV4Do6J
+aR+W/wgZ04EsbmrtAJNu9fB6OjIK7SZlx8PUdCNzNPO50t5b2GDJxTD8CHYfCc3JSl7Dac7wulLF
++w2OQE7ZxTvcaE0fIcHt7wuvBBbwz0Iitoz87vpjXOQO0vHilu6++tBYg2oz14STqaraj7oj8CMa
+cqvV+v/U+dLbyVihTSIBPWvQJyKdbRcE8ZwhYu6qGT1+pYBShidWRC3x3Q8TPw+/LBicNR9x9qPh
+W3GgB190lyUvnz950/YEu650H5ypm5M+/duPuPuAEm6B0+w44SYYP6NfIKJmDnpFL4kOrMW0Mu7r
+L0OFMtP8SPKJZQV+A+96hTP0Je3m/rOfBjSD3fGmHNkjvl31tDNMdWRvdmljIENvdXJ0w6hzIChJ
+bnJpYSkgPGx1ZG92aWMuY291cnRlc0BpbnJpYS5mcj6JAlYEEwECAEACGwMHCwkIBwMCAQYVCAIJ
+CgsEFgIDAQIeAQIXgBYhBDzkZFWKhP3GnbQM+wkLEZk9muu1BQJb9AmxBQkIgc6dAAoJEAkLEZk9
+muu1xHAP/2P9mxNp184mGgyGYrbU47bHwPithX8RxTzOOfpN9yINV5+aVrcHMdjl1e3F1XX1M0X/
+q5v6cXC9FwbZMfRn+oEi8bkA695eKpBvkFOIyNMcJ7qyoL8jGmqsVQr3HIJKVHLfBEjWngo3FERQ
+G/Uk1FZZC/fgNyKMUqQX85gQQ2QqURV0jRcJ+IaBXUj/01DaJTLUwiHR27jLJluXhIawG/TkrPF/
+tG9K2x7NhqbgSXRJgrXRYUfKUds7oNf8yBaO0JVLQps67sau81ctTtro09LTLUDPtgZecpzenHuc
+w6y7OSxQ6kBCAzxHsNKW7NBLakCjO/fjQ7lmOhYqbuurZK9MT/qHy9mWURQcc4OW0GUsWrQLPU5k
+D+xw1ns2jyRTTtSxX4DqzVunEMIXVFJg2TgodZWtuc2QChnSRVgV2AuXaO5wtL8fxAuNzAiXKCu5
+biclxi7HUwDrnHiznrwaK9TNemqoxyMwJHeIk5WspJTcmtwtu5u/uWX7vWM4Q952/SjRVWv4kjmx
+CCqEnMFwEk9z85uXsrF0sh6+MwMHuITvCdwBCQBet5iZ/1Go3r/bkPww8utZBJvFX44nL/sj+MzV
+0/LnRs6QF3qblyXlHRKkbFVq1b6KMFbyP1r/+PkIqIW+/8Gmxrr9x/fBdKn2014zP+K3N9Xtcdve
+XCpW5x8kuQINBFPo4hABEADPWDr75JXHpEHhmpkJ2A6vuRdVJXnVgpbcROorparemeo0G+/zPLT7
+wsEBVh7C6GI6EaVQjQdKNPRpW4FNKh03rialZz3oTZLCJGXjyJlwgzI1Nzp0BKE5p42fjw7Y7vdw
+fXiNSxtACeO25rMph+Xbq6WoPWiIf72J1EP0ckcJ6C/0CUkx5o8ffP7GM7rIsDsdxVTdLVolhe3B
+mA223FKQZlOg2CZsteRTdrfTB90C17f8w0KtefYN8nbttnA1+dBKY5wKV5X7HkysSf0CWgPd9hX+
+M/W6YLtHWnmxs246WxN5fyold5ZsivVxvyBGFqMWEKlw7o83hqtQnpCSiVuNjqVHPEuCJyYO8xuD
+cg3bK+T7Xf0T3KmJ+3Vm7goblpu6q50uhF7/T+6m3xGCuqsEkM4MtW4GqEIAZODf9YcKbe7OwdKK
+qrnhRs57Y9JF8ZYsNMDadYqW51NKyhu2Ow/pkT75vac+4RVdNE4rwp3CTIGNYXkSM6BMs8bRAhTY
+YaT+zRXr507CaCBjAm4JCeYAXxGfQZTgX+ShwcmZIOYrb3ivTBSzIo8zyGp6jUTCKU3tSnI3KT1i
+NswozI4zPNGKeaWKEcAZi3DzGB9pSTDVZqFa18hPnx2PUqyzHxK2B2l9GvEnblca8b1Lgp7XV5em
+jMlyD5NnAtDFyBaeMQlFVwARAQABiQIfBBgBAgAJBQJT6OIQAhsMAAoJEAkLEZk9muu1D4gP/3ub
+ayrVPGf02yXygr6jEnnDYr0pt5SZqm2O+1KbIZhfLDAxinEVt7mKhTrf0oJ881NPzDFok1F0Ad00
+cKjmOhTAhs5kN0wAxVTlmnYsZ2NeDBG8ULWh6fFHv0jRokxPW8dt9GBfrUW7a2/wFPZ4tz+qZX57
+ed5JkfcQFdmAQacYQhaA9z3l8SvTvDe2rQRSuK1Xf6hiGBWD50cAGISmKKBIg9FP7dJYq0mKekyW
+nvCtbux4Z7x/KBSk9UH9rwmdym354q6iq6Iz8MX9Qc6BYYJaTraEY53ifrt+7Gy7IP0SPHWgPvzh
+HDgVgcsnNUIgPCN6r2D2EuLMzpjdYDWQcbyjlnDKbGkiq4DzMDmaDx/ecDbUkkiTzOGvR6KtQSYr
+earXufQ0icy1I8a3AxLQyZaN05saf99Z1EOsxSmD/Fslu3UDBQe8Zh5XUMSbtZq5XpVkwfP12bH9
+SoseDgDbIKyzKo/Hyr01YUS2tr7dpet9Rb5YGk8BYlmLURBIGnPyLVzKd7E46vjCe3uMeVWxqDhv
+wNuDy9VPfcqHlgxx6bAhWAH6WvW+WaDLDZRnznBaBGXDNyg2ep1fzxgEbsTA6ws6ePuCY/YYFo1O
+82/Apkv7359mhJxBWipXV+cTZftng7nraWoXZ6ZGMFif7yD8Gt09MP05QAy58z7RIOVm6OGs
+EOF
+}
+
+variable "pgp_key_rekado" {
+  type = "string"
+  description = "Public PGP key for Ricardo Wurmus <address@hidden>"
+  default = <<EOF
+mQENBFHH9g0BCACxD5ETYwxukyVIy3eeYr6kcdt7ldqSB8SQhrWve37lu1xcDpvaVdseALwF0IBb
+EY7YCFQZ95dMdzZXRFgu18PvMFFV/g+qY3pH7Iqufw+SNSDB4/damETjuKcI4JojftXB2noJrEz6
+CQwb8vI2j3jeO8JoMPYD5V8E1eL7AbwY7tbXfoC1ojb+zEv11KoUsfjgJ3qdo2Kqp76Z8MuLwL9J
+AQCoosvIBsk9t5+2KRH54UsRGgv8wbtnh0lWzqQizQqMH80vUsxIpegwnRoR/7eGDtts9cN5iP0w
+tiClutpTOsek8gIo3cTIelWgdbCoBgFInz8m9od5OVNL2iQ/W8HHABEBAAG0G3Jla2FkbyA8cmVr
+YWRvQGVsZXBobHkubmV0PokBVQQTAQIAPwIbIwYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AWIQS8
+pom2NlU4AcPGIVAZeliII1+srAUCWxb6jgUJCzA4AQAKCRAZeliII1+srMxCB/48ASu5ywBMBnCx
+JWIupMm4K5qUUu8VB5pnvpwcknebaevmSOmFvAdusFbugeMUq6/qTYEEtx1flv4MLbcsXu24G1Q2
+kq3tBou/CXYCMoFyOexPIZCfWR9cTfJx2DWHGPvrpXPJjwp2er2setav36aP9rCl51Ws2iKfkQwm
+S32gjG1fqwXOlTw8jPfrFWHVY6dRQd/ILfjjUNOkfFd992iFsvaq842IV7e/Wl2lHVcP6r3Gv8s+
+mS+qyhNo/y7HuihXD/UMiToaTqwV56BNM44n6WzwHeVlVU15uEpwypsDmPqwbfvydX2oNkScbTRG
+eiWkKeu83BlYyQAVNq1QH/+suQENBFHH9g0BCADLxwOkZ6AEEQu8C2N2MKEyI6rTnH19VaZ9tEz/
+/zoSE+YpnvVNUzWxbDFApsOLq7v6Jad760mmq1tF5fHsralC8ylO0llwixfsEGcYfuWMZneJLrIT
+0J8qg7uYDEh/MVE0gCR5TqjeyJzxfJ+9gu0u0P2VbEL3XPUAWy9Eldice7U3bPrnz282QAuV4G3J
+ABfx6vcSr64sn7ZEn9Rdi874YRi40H5iTD0EOnSeq+4MHgMUMuSFyFP0rtGg7z0FccO/pifgcMD7
+fJ1bTfsSlBko3wojdpdbeGh/ZBDFaIkpZ+qXYcDqOJwW+JO64jE3EkJFCaDvjuZKNfpE/H30V/ev
+ABEBAAGJATwEGAECACYCGwwWIQS8pom2NlU4AcPGIVAZeliII1+srAUCWxb66wUJCzA4XgAKCRAZ
+eliII1+srKy7B/4hZmB5/FIErLq7mFzfC4x9r7pAACiSNuybU4n99CCLSE2+bk1ggR+5MaE8Md04
+GQGzB1VK4N0PM95PPEwIAyiOUzPpLiUX/XKupujKaKm2LqZhydRFhLClaL2WKQpSt9cdptRQJHnG
+iFRha80HeAG5pKpjIanbvo27GbD3hqoPXaMtwaldN41GNlK/GExwxLzyzFGN0PuHN2/D/1gK3xht
+Je23YxERJLi6XqLf2ODdwuMUDVYlv1BuO4TW5t6ZtlbMi8nd7zTW8LnQrfCXHSJljsuBL9PgFunK
+9A/6RmFxmV+an9YdLWhWXm/JzpXzzfhGhRbMVI0e8I84FydZ1FgF
+EOF
+}