Terraform all resources, update encryption scheme, add ingress

terraform/dns.tf

@@ -0,0 +1,15 @@
+# Route53 records - using a data source to reference the existing hosted zone
+# without importing it into Terraform state
+data "aws_route53_zone" "dumpnet" {
+  zone_id = var.hosted_zone_id
+}
+
+resource "aws_route53_record" "cluster" {
+  for_each = toset(var.dns_records)
+
+  zone_id = data.aws_route53_zone.dumpnet.zone_id
+  name    = "${each.value}.${var.domain}"
+  type    = "A"
+  ttl     = 300
+  records = [aws_eip.controlplane.public_ip]
+}