Merge branch 'master' into glb-backend-service-load-balancing-scheme
This commit is contained in:
commit
ed7235186a
|
@ -1,4 +1,5 @@
|
||||||
# Google Cloud Storage Module
|
# Google Cloud Storage Module
|
||||||
|
|
||||||
## Example
|
## Example
|
||||||
|
|
||||||
```hcl
|
```hcl
|
||||||
|
@ -41,12 +42,10 @@ module "bucket" {
|
||||||
iam = {
|
iam = {
|
||||||
"roles/storage.admin" = ["group:storage@example.com"]
|
"roles/storage.admin" = ["group:storage@example.com"]
|
||||||
}
|
}
|
||||||
|
|
||||||
retention_policy = {
|
retention_policy = {
|
||||||
retention_period = 100
|
retention_period = 100
|
||||||
is_locked = true
|
is_locked = true
|
||||||
}
|
}
|
||||||
|
|
||||||
logging_config = {
|
logging_config = {
|
||||||
log_bucket = var.bucket
|
log_bucket = var.bucket
|
||||||
log_object_prefix = null
|
log_object_prefix = null
|
||||||
|
@ -63,32 +62,26 @@ module "bucket" {
|
||||||
project_id = "myproject"
|
project_id = "myproject"
|
||||||
prefix = "test"
|
prefix = "test"
|
||||||
name = "my-bucket"
|
name = "my-bucket"
|
||||||
|
|
||||||
iam = {
|
iam = {
|
||||||
"roles/storage.admin" = ["group:storage@example.com"]
|
"roles/storage.admin" = ["group:storage@example.com"]
|
||||||
}
|
}
|
||||||
|
lifecycle_rules = {
|
||||||
lifecycle_rule = {
|
lr-0 = {
|
||||||
action = {
|
action = {
|
||||||
type = "SetStorageClass"
|
type = "SetStorageClass"
|
||||||
storage_class = "STANDARD"
|
storage_class = "STANDARD"
|
||||||
}
|
}
|
||||||
condition = {
|
condition = {
|
||||||
age = 30
|
age = 30
|
||||||
created_before = null
|
}
|
||||||
with_state = null
|
|
||||||
matches_storage_class = null
|
|
||||||
num_newer_versions = null
|
|
||||||
custom_time_before = null
|
|
||||||
days_since_custom_time = null
|
|
||||||
days_since_noncurrent_time = null
|
|
||||||
noncurrent_time_before = null
|
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
# tftest modules=1 resources=2
|
# tftest modules=1 resources=2
|
||||||
```
|
```
|
||||||
|
|
||||||
### Minimal example with GCS notifications
|
### Minimal example with GCS notifications
|
||||||
|
|
||||||
```hcl
|
```hcl
|
||||||
module "bucket-gcs-notification" {
|
module "bucket-gcs-notification" {
|
||||||
source = "./fabric/modules/gcs"
|
source = "./fabric/modules/gcs"
|
||||||
|
@ -112,23 +105,23 @@ module "bucket-gcs-notification" {
|
||||||
|
|
||||||
| name | description | type | required | default |
|
| name | description | type | required | default |
|
||||||
|---|---|:---:|:---:|:---:|
|
|---|---|:---:|:---:|:---:|
|
||||||
| [name](variables.tf#L89) | Bucket name suffix. | <code>string</code> | ✓ | |
|
| [name](variables.tf#L116) | Bucket name suffix. | <code>string</code> | ✓ | |
|
||||||
| [project_id](variables.tf#L117) | Bucket project id. | <code>string</code> | ✓ | |
|
| [project_id](variables.tf#L145) | Bucket project id. | <code>string</code> | ✓ | |
|
||||||
| [cors](variables.tf#L17) | CORS configuration for the bucket. Defaults to null. | <code title="object({ origin = list(string) method = list(string) response_header = list(string) max_age_seconds = number })">object({…})</code> | | <code>null</code> |
|
| [cors](variables.tf#L17) | CORS configuration for the bucket. Defaults to null. | <code title="object({ origin = optional(list(string)) method = optional(list(string)) response_header = optional(list(string)) max_age_seconds = optional(number) })">object({…})</code> | | <code>null</code> |
|
||||||
| [encryption_key](variables.tf#L28) | KMS key that will be used for encryption. | <code>string</code> | | <code>null</code> |
|
| [encryption_key](variables.tf#L28) | KMS key that will be used for encryption. | <code>string</code> | | <code>null</code> |
|
||||||
| [force_destroy](variables.tf#L34) | Optional map to set force destroy keyed by name, defaults to false. | <code>bool</code> | | <code>false</code> |
|
| [force_destroy](variables.tf#L34) | Optional map to set force destroy keyed by name, defaults to false. | <code>bool</code> | | <code>false</code> |
|
||||||
| [iam](variables.tf#L40) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
| [iam](variables.tf#L40) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||||
| [labels](variables.tf#L46) | Labels to be attached to all buckets. | <code>map(string)</code> | | <code>{}</code> |
|
| [labels](variables.tf#L46) | Labels to be attached to all buckets. | <code>map(string)</code> | | <code>{}</code> |
|
||||||
| [lifecycle_rule](variables.tf#L52) | Bucket lifecycle rule. | <code title="object({ action = object({ type = string storage_class = string }) condition = object({ age = number created_before = string with_state = string matches_storage_class = list(string) num_newer_versions = string custom_time_before = string days_since_custom_time = string days_since_noncurrent_time = string noncurrent_time_before = string }) })">object({…})</code> | | <code>null</code> |
|
| [lifecycle_rules](variables.tf#L52) | Bucket lifecycle rule. | <code title="map(object({ action = object({ type = string storage_class = optional(string) }) condition = object({ age = optional(number) created_before = optional(string) custom_time_before = optional(string) days_since_custom_time = optional(number) days_since_noncurrent_time = optional(number) matches_prefix = optional(list(string)) matches_storage_class = optional(list(string)) # STANDARD, MULTI_REGIONAL, REGIONAL, NEARLINE, COLDLINE, ARCHIVE, DURABLE_REDUCED_AVAILABILITY matches_suffix = optional(list(string)) noncurrent_time_before = optional(string) num_newer_versions = optional(number) with_state = optional(string) # "LIVE", "ARCHIVED", "ANY" }) }))">map(object({…}))</code> | | <code>{}</code> |
|
||||||
| [location](variables.tf#L74) | Bucket location. | <code>string</code> | | <code>"EU"</code> |
|
| [location](variables.tf#L101) | Bucket location. | <code>string</code> | | <code>"EU"</code> |
|
||||||
| [logging_config](variables.tf#L80) | Bucket logging configuration. | <code title="object({ log_bucket = string log_object_prefix = string })">object({…})</code> | | <code>null</code> |
|
| [logging_config](variables.tf#L107) | Bucket logging configuration. | <code title="object({ log_bucket = string log_object_prefix = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||||
| [notification_config](variables.tf#L94) | GCS Notification configuration. | <code title="object({ enabled = bool payload_format = string topic_name = string sa_email = string event_types = list(string) custom_attributes = map(string) })">object({…})</code> | | <code>null</code> |
|
| [notification_config](variables.tf#L121) | GCS Notification configuration. | <code title="object({ enabled = bool payload_format = string topic_name = string sa_email = string event_types = optional(list(string)) custom_attributes = optional(map(string)) object_name_prefix = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||||
| [prefix](variables.tf#L107) | Optional prefix used to generate the bucket name. | <code>string</code> | | <code>null</code> |
|
| [prefix](variables.tf#L135) | Optional prefix used to generate the bucket name. | <code>string</code> | | <code>null</code> |
|
||||||
| [retention_policy](variables.tf#L122) | Bucket retention policy. | <code title="object({ retention_period = number is_locked = bool })">object({…})</code> | | <code>null</code> |
|
| [retention_policy](variables.tf#L150) | Bucket retention policy. | <code title="object({ retention_period = number is_locked = optional(bool) })">object({…})</code> | | <code>null</code> |
|
||||||
| [storage_class](variables.tf#L131) | Bucket storage class. | <code>string</code> | | <code>"MULTI_REGIONAL"</code> |
|
| [storage_class](variables.tf#L159) | Bucket storage class. | <code>string</code> | | <code>"MULTI_REGIONAL"</code> |
|
||||||
| [uniform_bucket_level_access](variables.tf#L141) | Allow using object ACLs (false) or not (true, this is the recommended behavior) , defaults to true (which is the recommended practice, but not the behavior of storage API). | <code>bool</code> | | <code>true</code> |
|
| [uniform_bucket_level_access](variables.tf#L169) | Allow using object ACLs (false) or not (true, this is the recommended behavior) , defaults to true (which is the recommended practice, but not the behavior of storage API). | <code>bool</code> | | <code>true</code> |
|
||||||
| [versioning](variables.tf#L147) | Enable versioning, defaults to false. | <code>bool</code> | | <code>false</code> |
|
| [versioning](variables.tf#L175) | Enable versioning, defaults to false. | <code>bool</code> | | <code>false</code> |
|
||||||
| [website](variables.tf#L153) | Bucket website. | <code title="object({ main_page_suffix = string not_found_page = string })">object({…})</code> | | <code>null</code> |
|
| [website](variables.tf#L181) | Bucket website. | <code title="object({ main_page_suffix = optional(string) not_found_page = optional(string) })">object({…})</code> | | <code>null</code> |
|
||||||
|
|
||||||
## Outputs
|
## Outputs
|
||||||
|
|
||||||
|
|
|
@ -75,22 +75,25 @@ resource "google_storage_bucket" "bucket" {
|
||||||
}
|
}
|
||||||
|
|
||||||
dynamic "lifecycle_rule" {
|
dynamic "lifecycle_rule" {
|
||||||
for_each = var.lifecycle_rule == null ? [] : [""]
|
for_each = var.lifecycle_rules
|
||||||
|
iterator = rule
|
||||||
content {
|
content {
|
||||||
action {
|
action {
|
||||||
type = var.lifecycle_rule.action["type"]
|
type = rule.value.action.type
|
||||||
storage_class = var.lifecycle_rule.action["storage_class"]
|
storage_class = rule.value.action.storage_class
|
||||||
}
|
}
|
||||||
condition {
|
condition {
|
||||||
age = var.lifecycle_rule.condition["age"]
|
age = rule.value.condition.age
|
||||||
created_before = var.lifecycle_rule.condition["created_before"]
|
created_before = rule.value.condition.created_before
|
||||||
with_state = var.lifecycle_rule.condition["with_state"]
|
custom_time_before = rule.value.condition.custom_time_before
|
||||||
matches_storage_class = var.lifecycle_rule.condition["matches_storage_class"]
|
days_since_custom_time = rule.value.condition.days_since_custom_time
|
||||||
num_newer_versions = var.lifecycle_rule.condition["num_newer_versions"]
|
days_since_noncurrent_time = rule.value.condition.days_since_noncurrent_time
|
||||||
custom_time_before = var.lifecycle_rule.condition["custom_time_before"]
|
matches_prefix = rule.value.condition.matches_prefix
|
||||||
days_since_custom_time = var.lifecycle_rule.condition["days_since_custom_time"]
|
matches_storage_class = rule.value.condition.matches_storage_class
|
||||||
days_since_noncurrent_time = var.lifecycle_rule.condition["days_since_noncurrent_time"]
|
matches_suffix = rule.value.condition.matches_suffix
|
||||||
noncurrent_time_before = var.lifecycle_rule.condition["noncurrent_time_before"]
|
noncurrent_time_before = rule.value.condition.noncurrent_time_before
|
||||||
|
num_newer_versions = rule.value.condition.num_newer_versions
|
||||||
|
with_state = rule.value.condition.with_state
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
@ -108,11 +111,10 @@ resource "google_storage_notification" "notification" {
|
||||||
bucket = google_storage_bucket.bucket.name
|
bucket = google_storage_bucket.bucket.name
|
||||||
payload_format = var.notification_config.payload_format
|
payload_format = var.notification_config.payload_format
|
||||||
topic = google_pubsub_topic.topic[0].id
|
topic = google_pubsub_topic.topic[0].id
|
||||||
event_types = var.notification_config.event_types
|
|
||||||
custom_attributes = var.notification_config.custom_attributes
|
custom_attributes = var.notification_config.custom_attributes
|
||||||
|
event_types = var.notification_config.event_types
|
||||||
|
object_name_prefix = var.notification_config.object_name_prefix
|
||||||
depends_on = [google_pubsub_topic_iam_binding.binding]
|
depends_on = [google_pubsub_topic_iam_binding.binding]
|
||||||
|
|
||||||
}
|
}
|
||||||
resource "google_pubsub_topic_iam_binding" "binding" {
|
resource "google_pubsub_topic_iam_binding" "binding" {
|
||||||
count = local.notification ? 1 : 0
|
count = local.notification ? 1 : 0
|
||||||
|
|
|
@ -17,10 +17,10 @@
|
||||||
variable "cors" {
|
variable "cors" {
|
||||||
description = "CORS configuration for the bucket. Defaults to null."
|
description = "CORS configuration for the bucket. Defaults to null."
|
||||||
type = object({
|
type = object({
|
||||||
origin = list(string)
|
origin = optional(list(string))
|
||||||
method = list(string)
|
method = optional(list(string))
|
||||||
response_header = list(string)
|
response_header = optional(list(string))
|
||||||
max_age_seconds = number
|
max_age_seconds = optional(number)
|
||||||
})
|
})
|
||||||
default = null
|
default = null
|
||||||
}
|
}
|
||||||
|
@ -49,26 +49,53 @@ variable "labels" {
|
||||||
default = {}
|
default = {}
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "lifecycle_rule" {
|
variable "lifecycle_rules" {
|
||||||
description = "Bucket lifecycle rule."
|
description = "Bucket lifecycle rule."
|
||||||
type = object({
|
type = map(object({
|
||||||
action = object({
|
action = object({
|
||||||
type = string
|
type = string
|
||||||
storage_class = string
|
storage_class = optional(string)
|
||||||
})
|
})
|
||||||
condition = object({
|
condition = object({
|
||||||
age = number
|
age = optional(number)
|
||||||
created_before = string
|
created_before = optional(string)
|
||||||
with_state = string
|
custom_time_before = optional(string)
|
||||||
matches_storage_class = list(string)
|
days_since_custom_time = optional(number)
|
||||||
num_newer_versions = string
|
days_since_noncurrent_time = optional(number)
|
||||||
custom_time_before = string
|
matches_prefix = optional(list(string))
|
||||||
days_since_custom_time = string
|
matches_storage_class = optional(list(string)) # STANDARD, MULTI_REGIONAL, REGIONAL, NEARLINE, COLDLINE, ARCHIVE, DURABLE_REDUCED_AVAILABILITY
|
||||||
days_since_noncurrent_time = string
|
matches_suffix = optional(list(string))
|
||||||
noncurrent_time_before = string
|
noncurrent_time_before = optional(string)
|
||||||
|
num_newer_versions = optional(number)
|
||||||
|
with_state = optional(string) # "LIVE", "ARCHIVED", "ANY"
|
||||||
})
|
})
|
||||||
})
|
}))
|
||||||
default = null
|
default = {}
|
||||||
|
nullable = false
|
||||||
|
validation {
|
||||||
|
condition = alltrue([
|
||||||
|
for k, v in var.lifecycle_rules : v.action != null && v.condition != null
|
||||||
|
])
|
||||||
|
error_message = "Lifecycle rules action and condition cannot be null."
|
||||||
|
}
|
||||||
|
validation {
|
||||||
|
condition = alltrue([
|
||||||
|
for k, v in var.lifecycle_rules : contains(
|
||||||
|
["Delete", "SetStorageClass", "AbortIncompleteMultipartUpload"],
|
||||||
|
v.action.type
|
||||||
|
)
|
||||||
|
])
|
||||||
|
error_message = "Lifecycle rules action type has unsupported value."
|
||||||
|
}
|
||||||
|
validation {
|
||||||
|
condition = alltrue([
|
||||||
|
for k, v in var.lifecycle_rules :
|
||||||
|
v.action.type != "SetStorageClass"
|
||||||
|
||
|
||||||
|
v.action.storage_class != null
|
||||||
|
])
|
||||||
|
error_message = "Lifecycle rules with action type SetStorageClass require a storage class."
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
variable "location" {
|
variable "location" {
|
||||||
|
@ -81,7 +108,7 @@ variable "logging_config" {
|
||||||
description = "Bucket logging configuration."
|
description = "Bucket logging configuration."
|
||||||
type = object({
|
type = object({
|
||||||
log_bucket = string
|
log_bucket = string
|
||||||
log_object_prefix = string
|
log_object_prefix = optional(string)
|
||||||
})
|
})
|
||||||
default = null
|
default = null
|
||||||
}
|
}
|
||||||
|
@ -98,8 +125,9 @@ variable "notification_config" {
|
||||||
payload_format = string
|
payload_format = string
|
||||||
topic_name = string
|
topic_name = string
|
||||||
sa_email = string
|
sa_email = string
|
||||||
event_types = list(string)
|
event_types = optional(list(string))
|
||||||
custom_attributes = map(string)
|
custom_attributes = optional(map(string))
|
||||||
|
object_name_prefix = optional(string)
|
||||||
})
|
})
|
||||||
default = null
|
default = null
|
||||||
}
|
}
|
||||||
|
@ -123,7 +151,7 @@ variable "retention_policy" {
|
||||||
description = "Bucket retention policy."
|
description = "Bucket retention policy."
|
||||||
type = object({
|
type = object({
|
||||||
retention_period = number
|
retention_period = number
|
||||||
is_locked = bool
|
is_locked = optional(bool)
|
||||||
})
|
})
|
||||||
default = null
|
default = null
|
||||||
}
|
}
|
||||||
|
@ -153,8 +181,8 @@ variable "versioning" {
|
||||||
variable "website" {
|
variable "website" {
|
||||||
description = "Bucket website."
|
description = "Bucket website."
|
||||||
type = object({
|
type = object({
|
||||||
main_page_suffix = string
|
main_page_suffix = optional(string)
|
||||||
not_found_page = string
|
not_found_page = optional(string)
|
||||||
})
|
})
|
||||||
default = null
|
default = null
|
||||||
}
|
}
|
||||||
|
|
|
@ -0,0 +1,13 @@
|
||||||
|
force_destroy = true
|
||||||
|
labels = { environment = "test" }
|
||||||
|
logging_config = {
|
||||||
|
log_bucket = "foo"
|
||||||
|
}
|
||||||
|
name = "test"
|
||||||
|
project_id = "test-project"
|
||||||
|
retention_policy = {
|
||||||
|
retention_period = 5
|
||||||
|
is_locked = false
|
||||||
|
}
|
||||||
|
storage_class = "MULTI_REGIONAL"
|
||||||
|
versioning = true
|
|
@ -1,29 +0,0 @@
|
||||||
/**
|
|
||||||
* Copyright 2022 Google LLC
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
module "test" {
|
|
||||||
source = "../../../../modules/gcs"
|
|
||||||
project_id = "my-project"
|
|
||||||
uniform_bucket_level_access = var.uniform_bucket_level_access
|
|
||||||
force_destroy = var.force_destroy
|
|
||||||
iam = var.iam
|
|
||||||
labels = var.labels
|
|
||||||
logging_config = var.logging_config
|
|
||||||
name = "bucket-a"
|
|
||||||
prefix = var.prefix
|
|
||||||
retention_policy = var.retention_policy
|
|
||||||
versioning = var.versioning
|
|
||||||
}
|
|
|
@ -1,77 +0,0 @@
|
||||||
/**
|
|
||||||
* Copyright 2022 Google LLC
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
variable "uniform_bucket_level_access" {
|
|
||||||
type = bool
|
|
||||||
default = false
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "force_destroy" {
|
|
||||||
type = bool
|
|
||||||
default = true
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "iam" {
|
|
||||||
type = map(list(string))
|
|
||||||
default = {}
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "labels" {
|
|
||||||
type = map(string)
|
|
||||||
default = { environment = "test" }
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "logging_config" {
|
|
||||||
type = object({
|
|
||||||
log_bucket = string
|
|
||||||
log_object_prefix = string
|
|
||||||
})
|
|
||||||
default = {
|
|
||||||
log_bucket = "foo"
|
|
||||||
log_object_prefix = null
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "prefix" {
|
|
||||||
type = string
|
|
||||||
default = null
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "project_id" {
|
|
||||||
type = string
|
|
||||||
default = "my-project"
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "retention_policy" {
|
|
||||||
type = object({
|
|
||||||
retention_period = number
|
|
||||||
is_locked = bool
|
|
||||||
})
|
|
||||||
default = {
|
|
||||||
retention_period = 5
|
|
||||||
is_locked = false
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "storage_class" {
|
|
||||||
type = string
|
|
||||||
default = "MULTI_REGIONAL"
|
|
||||||
}
|
|
||||||
|
|
||||||
variable "versioning" {
|
|
||||||
type = bool
|
|
||||||
default = true
|
|
||||||
}
|
|
|
@ -0,0 +1,3 @@
|
||||||
|
iam = {
|
||||||
|
"roles/storage.admin" = ["user:a@example.org"]
|
||||||
|
}
|
|
@ -0,0 +1,30 @@
|
||||||
|
# Copyright 2022 Google LLC
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
values:
|
||||||
|
google_storage_bucket.bucket:
|
||||||
|
name: test
|
||||||
|
|
||||||
|
google_storage_bucket_iam_binding.bindings["roles/storage.admin"]:
|
||||||
|
bucket: test
|
||||||
|
condition: []
|
||||||
|
members:
|
||||||
|
- user:a@example.org
|
||||||
|
role: roles/storage.admin
|
||||||
|
|
||||||
|
counts:
|
||||||
|
google_storage_bucket: 1
|
||||||
|
google_storage_bucket_iam_binding: 1
|
||||||
|
modules: 0
|
||||||
|
resources: 2
|
|
@ -0,0 +1 @@
|
||||||
|
prefix = "foo"
|
|
@ -0,0 +1,44 @@
|
||||||
|
# Copyright 2022 Google LLC
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
values:
|
||||||
|
google_storage_bucket.bucket:
|
||||||
|
force_destroy: true
|
||||||
|
labels:
|
||||||
|
environment: test
|
||||||
|
location: EU
|
||||||
|
logging:
|
||||||
|
- log_bucket: foo
|
||||||
|
name: foo-test
|
||||||
|
project: test-project
|
||||||
|
retention_policy:
|
||||||
|
- is_locked: false
|
||||||
|
retention_period: 5
|
||||||
|
storage_class: MULTI_REGIONAL
|
||||||
|
uniform_bucket_level_access: true
|
||||||
|
versioning:
|
||||||
|
- enabled: true
|
||||||
|
|
||||||
|
counts:
|
||||||
|
google_storage_bucket: 1
|
||||||
|
modules: 0
|
||||||
|
resources: 1
|
||||||
|
|
||||||
|
outputs:
|
||||||
|
bucket: __missing__
|
||||||
|
id: foo-test
|
||||||
|
name: foo-test
|
||||||
|
notification: null
|
||||||
|
topic: null
|
||||||
|
url: __missing__
|
|
@ -1,54 +0,0 @@
|
||||||
# Copyright 2022 Google LLC
|
|
||||||
#
|
|
||||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
# you may not use this file except in compliance with the License.
|
|
||||||
# You may obtain a copy of the License at
|
|
||||||
#
|
|
||||||
# http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
#
|
|
||||||
# Unless required by applicable law or agreed to in writing, software
|
|
||||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
# See the License for the specific language governing permissions and
|
|
||||||
# limitations under the License.
|
|
||||||
|
|
||||||
def test_buckets(plan_runner):
|
|
||||||
"Test bucket resources."
|
|
||||||
_, resources = plan_runner()
|
|
||||||
assert len(resources) == 1
|
|
||||||
r = resources[0]
|
|
||||||
assert r['type'] == 'google_storage_bucket'
|
|
||||||
assert r['values']['name'] == 'bucket-a'
|
|
||||||
assert r['values']['project'] == 'my-project'
|
|
||||||
|
|
||||||
|
|
||||||
def test_prefix(plan_runner):
|
|
||||||
"Test bucket name when prefix is set."
|
|
||||||
_, resources = plan_runner(prefix='foo')
|
|
||||||
assert resources[0]['values']['name'] == 'foo-bucket-a'
|
|
||||||
|
|
||||||
|
|
||||||
def test_config_values(plan_runner):
|
|
||||||
"Test that variables set the correct attributes on buckets."
|
|
||||||
variables = dict(
|
|
||||||
uniform_bucket_level_access='true',
|
|
||||||
force_destroy='true',
|
|
||||||
versioning='true'
|
|
||||||
)
|
|
||||||
_, resources = plan_runner(**variables)
|
|
||||||
assert len(resources) == 1
|
|
||||||
r = resources[0]
|
|
||||||
assert r['values']['uniform_bucket_level_access'] is True
|
|
||||||
assert r['values']['force_destroy'] is True
|
|
||||||
assert r['values']['versioning'] == [{'enabled': True}]
|
|
||||||
assert r['values']['logging'] == [{'log_bucket': 'foo'}]
|
|
||||||
assert r['values']['retention_policy'] == [
|
|
||||||
{'is_locked': False, 'retention_period': 5}
|
|
||||||
]
|
|
||||||
|
|
||||||
|
|
||||||
def test_iam(plan_runner):
|
|
||||||
"Test bucket resources with iam roles and members."
|
|
||||||
iam = '{ "roles/storage.admin" = ["user:a@b.com"] }'
|
|
||||||
_, resources = plan_runner(iam=iam)
|
|
||||||
assert len(resources) == 2
|
|
|
@ -0,0 +1,20 @@
|
||||||
|
# Copyright 2022 Google LLC
|
||||||
|
#
|
||||||
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||||
|
# you may not use this file except in compliance with the License.
|
||||||
|
# You may obtain a copy of the License at
|
||||||
|
#
|
||||||
|
# http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
#
|
||||||
|
# Unless required by applicable law or agreed to in writing, software
|
||||||
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||||
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
# See the License for the specific language governing permissions and
|
||||||
|
# limitations under the License.
|
||||||
|
|
||||||
|
module: modules/gcs
|
||||||
|
common_tfvars:
|
||||||
|
- common.tfvars
|
||||||
|
tests:
|
||||||
|
prefix:
|
||||||
|
iam:
|
Loading…
Reference in New Issue