Add Terraform for production environment

iac/.gitignore

@@ -0,0 +1 @@
+.terraform/

iac/cal-itp-data-infra-staging/disks/us-west1/provider.tf

@@ -0,0 +1,12 @@
+provider "google" {
+  project = "cal-itp-data-infra-staging"
+}
+
+terraform {
+	required_providers {
+		google = {
+	    version = "~> 6.19.0"
+			source = "hashicorp/google"
+		}
+  }
+}

iac/cal-itp-data-infra-staging/disks/us-west1/terraform.tfstate

@@ -0,0 +1,16 @@
+{
+    "version": 3,
+    "terraform_version": "0.12.31",
+    "serial": 1,
+    "lineage": "5fbfd515-ae56-2808-6b6f-4f2f5dc59232",
+    "modules": [
+        {
+            "path": [
+                "root"
+            ],
+            "outputs": {},
+            "resources": {},
+            "depends_on": []
+        }
+    ]
+}

iac/cal-itp-data-infra-staging/dns/us-west1/provider.tf

@@ -0,0 +1,12 @@
+provider "google" {
+  project = "cal-itp-data-infra-staging"
+}
+
+terraform {
+	required_providers {
+		google = {
+	    version = "~> 6.19.0"
+			source = "hashicorp/google"
+		}
+  }
+}

iac/cal-itp-data-infra-staging/dns/us-west1/terraform.tfstate

@@ -0,0 +1,16 @@
+{
+    "version": 3,
+    "terraform_version": "0.12.31",
+    "serial": 1,
+    "lineage": "cd5526d7-ad97-9396-0256-ca886c90fe2b",
+    "modules": [
+        {
+            "path": [
+                "root"
+            ],
+            "outputs": {},
+            "resources": {},
+            "depends_on": []
+        }
+    ]
+}

iac/cal-itp-data-infra-staging/firewall/us-west1/compute_firewall.tf

@@ -0,0 +1,71 @@
+resource "google_compute_firewall" "tfer--default-allow-icmp" {
+  allow {
+    protocol = "icmp"
+  }
+
+  description   = "Allow ICMP from anywhere"
+  direction     = "INGRESS"
+  disabled      = "false"
+  name          = "default-allow-icmp"
+  network       = "${data.terraform_remote_state.networks.outputs.google_compute_network_tfer--default_self_link}"
+  priority      = "65534"
+  project       = "cal-itp-data-infra-staging"
+  source_ranges = ["0.0.0.0/0"]
+}
+
+resource "google_compute_firewall" "tfer--default-allow-internal" {
+  allow {
+    ports    = ["0-65535"]
+    protocol = "tcp"
+  }
+
+  allow {
+    ports    = ["0-65535"]
+    protocol = "udp"
+  }
+
+  allow {
+    protocol = "icmp"
+  }
+
+  description   = "Allow internal traffic on the default network"
+  direction     = "INGRESS"
+  disabled      = "false"
+  name          = "default-allow-internal"
+  network       = "${data.terraform_remote_state.networks.outputs.google_compute_network_tfer--default_self_link}"
+  priority      = "65534"
+  project       = "cal-itp-data-infra-staging"
+  source_ranges = ["10.128.0.0/9"]
+}
+
+resource "google_compute_firewall" "tfer--default-allow-rdp" {
+  allow {
+    ports    = ["3389"]
+    protocol = "tcp"
+  }
+
+  description   = "Allow RDP from anywhere"
+  direction     = "INGRESS"
+  disabled      = "false"
+  name          = "default-allow-rdp"
+  network       = "${data.terraform_remote_state.networks.outputs.google_compute_network_tfer--default_self_link}"
+  priority      = "65534"
+  project       = "cal-itp-data-infra-staging"
+  source_ranges = ["0.0.0.0/0"]
+}
+
+resource "google_compute_firewall" "tfer--default-allow-ssh" {
+  allow {
+    ports    = ["22"]
+    protocol = "tcp"
+  }
+
+  description   = "Allow SSH from anywhere"
+  direction     = "INGRESS"
+  disabled      = "false"
+  name          = "default-allow-ssh"
+  network       = "${data.terraform_remote_state.networks.outputs.google_compute_network_tfer--default_self_link}"
+  priority      = "65534"
+  project       = "cal-itp-data-infra-staging"
+  source_ranges = ["0.0.0.0/0"]
+}

iac/cal-itp-data-infra-staging/firewall/us-west1/outputs.tf

@@ -0,0 +1,15 @@
+output "google_compute_firewall_tfer--default-allow-icmp_self_link" {
+  value = "${google_compute_firewall.tfer--default-allow-icmp.self_link}"
+}
+
+output "google_compute_firewall_tfer--default-allow-internal_self_link" {
+  value = "${google_compute_firewall.tfer--default-allow-internal.self_link}"
+}
+
+output "google_compute_firewall_tfer--default-allow-rdp_self_link" {
+  value = "${google_compute_firewall.tfer--default-allow-rdp.self_link}"
+}
+
+output "google_compute_firewall_tfer--default-allow-ssh_self_link" {
+  value = "${google_compute_firewall.tfer--default-allow-ssh.self_link}"
+}

iac/cal-itp-data-infra-staging/firewall/us-west1/provider.tf

@@ -0,0 +1,12 @@
+provider "google" {
+  project = "cal-itp-data-infra-staging"
+}
+
+terraform {
+	required_providers {
+		google = {
+	    version = "~> 6.19.0"
+			source = "hashicorp/google"
+		}
+  }
+}