129 lines
7.1 KiB
Markdown
129 lines
7.1 KiB
Markdown
# Google Cloud Storage Module
|
|
|
|
## Example
|
|
|
|
```hcl
|
|
module "bucket" {
|
|
source = "./fabric/modules/gcs"
|
|
project_id = "myproject"
|
|
prefix = "test"
|
|
name = "my-bucket"
|
|
versioning = true
|
|
iam = {
|
|
"roles/storage.admin" = ["group:storage@example.com"]
|
|
}
|
|
labels = {
|
|
cost-center = "devops"
|
|
}
|
|
}
|
|
# tftest modules=1 resources=2 inventory=simple.yaml
|
|
```
|
|
|
|
### Example with Cloud KMS
|
|
|
|
```hcl
|
|
module "bucket" {
|
|
source = "./fabric/modules/gcs"
|
|
project_id = "myproject"
|
|
name = "my-bucket"
|
|
encryption_key = "my-encryption-key"
|
|
}
|
|
# tftest modules=1 resources=1 inventory=cmek.yaml
|
|
```
|
|
|
|
### Example with retention policy and logging
|
|
|
|
```hcl
|
|
module "bucket" {
|
|
source = "./fabric/modules/gcs"
|
|
project_id = "myproject"
|
|
name = "my-bucket"
|
|
retention_policy = {
|
|
retention_period = 100
|
|
is_locked = true
|
|
}
|
|
logging_config = {
|
|
log_bucket = "log-bucket"
|
|
log_object_prefix = null
|
|
}
|
|
}
|
|
# tftest modules=1 resources=1 inventory=retention-logging.yaml
|
|
```
|
|
|
|
### Example with lifecycle rule
|
|
|
|
```hcl
|
|
module "bucket" {
|
|
source = "./fabric/modules/gcs"
|
|
project_id = "myproject"
|
|
name = "my-bucket"
|
|
lifecycle_rules = {
|
|
lr-0 = {
|
|
action = {
|
|
type = "SetStorageClass"
|
|
storage_class = "STANDARD"
|
|
}
|
|
condition = {
|
|
age = 30
|
|
}
|
|
}
|
|
}
|
|
}
|
|
# tftest modules=1 resources=1 inventory=lifecycle.yaml
|
|
```
|
|
|
|
### Minimal example with GCS notifications
|
|
|
|
```hcl
|
|
module "bucket-gcs-notification" {
|
|
source = "./fabric/modules/gcs"
|
|
project_id = "myproject"
|
|
name = "my-bucket"
|
|
notification_config = {
|
|
enabled = true
|
|
payload_format = "JSON_API_V1"
|
|
sa_email = "service-<project-number>@gs-project-accounts.iam.gserviceaccount.com" # GCS SA email must be passed or fetched from projects module.
|
|
topic_name = "gcs-notification-topic"
|
|
event_types = ["OBJECT_FINALIZE"]
|
|
custom_attributes = {}
|
|
}
|
|
}
|
|
# tftest modules=1 resources=4 inventory=notification.yaml
|
|
```
|
|
<!-- BEGIN TFDOC -->
|
|
|
|
## Variables
|
|
|
|
| name | description | type | required | default |
|
|
|---|---|:---:|:---:|:---:|
|
|
| [name](variables.tf#L116) | Bucket name suffix. | <code>string</code> | ✓ | |
|
|
| [project_id](variables.tf#L145) | Bucket project id. | <code>string</code> | ✓ | |
|
|
| [cors](variables.tf#L17) | CORS configuration for the bucket. Defaults to null. | <code title="object({ origin = optional(list(string)) method = optional(list(string)) response_header = optional(list(string)) max_age_seconds = optional(number) })">object({…})</code> | | <code>null</code> |
|
|
| [encryption_key](variables.tf#L28) | KMS key that will be used for encryption. | <code>string</code> | | <code>null</code> |
|
|
| [force_destroy](variables.tf#L34) | Optional map to set force destroy keyed by name, defaults to false. | <code>bool</code> | | <code>false</code> |
|
|
| [iam](variables.tf#L40) | IAM bindings in {ROLE => [MEMBERS]} format. | <code>map(list(string))</code> | | <code>{}</code> |
|
|
| [labels](variables.tf#L46) | Labels to be attached to all buckets. | <code>map(string)</code> | | <code>{}</code> |
|
|
| [lifecycle_rules](variables.tf#L52) | Bucket lifecycle rule. | <code title="map(object({ action = object({ type = string storage_class = optional(string) }) condition = object({ age = optional(number) created_before = optional(string) custom_time_before = optional(string) days_since_custom_time = optional(number) days_since_noncurrent_time = optional(number) matches_prefix = optional(list(string)) matches_storage_class = optional(list(string)) # STANDARD, MULTI_REGIONAL, REGIONAL, NEARLINE, COLDLINE, ARCHIVE, DURABLE_REDUCED_AVAILABILITY matches_suffix = optional(list(string)) noncurrent_time_before = optional(string) num_newer_versions = optional(number) with_state = optional(string) # "LIVE", "ARCHIVED", "ANY" }) }))">map(object({…}))</code> | | <code>{}</code> |
|
|
| [location](variables.tf#L101) | Bucket location. | <code>string</code> | | <code>"EU"</code> |
|
|
| [logging_config](variables.tf#L107) | Bucket logging configuration. | <code title="object({ log_bucket = string log_object_prefix = optional(string) })">object({…})</code> | | <code>null</code> |
|
|
| [notification_config](variables.tf#L121) | GCS Notification configuration. | <code title="object({ enabled = bool payload_format = string topic_name = string sa_email = string event_types = optional(list(string)) custom_attributes = optional(map(string)) object_name_prefix = optional(string) })">object({…})</code> | | <code>null</code> |
|
|
| [prefix](variables.tf#L135) | Optional prefix used to generate the bucket name. | <code>string</code> | | <code>null</code> |
|
|
| [retention_policy](variables.tf#L150) | Bucket retention policy. | <code title="object({ retention_period = number is_locked = optional(bool) })">object({…})</code> | | <code>null</code> |
|
|
| [storage_class](variables.tf#L159) | Bucket storage class. | <code>string</code> | | <code>"MULTI_REGIONAL"</code> |
|
|
| [uniform_bucket_level_access](variables.tf#L169) | Allow using object ACLs (false) or not (true, this is the recommended behavior) , defaults to true (which is the recommended practice, but not the behavior of storage API). | <code>bool</code> | | <code>true</code> |
|
|
| [versioning](variables.tf#L175) | Enable versioning, defaults to false. | <code>bool</code> | | <code>false</code> |
|
|
| [website](variables.tf#L181) | Bucket website. | <code title="object({ main_page_suffix = optional(string) not_found_page = optional(string) })">object({…})</code> | | <code>null</code> |
|
|
|
|
## Outputs
|
|
|
|
| name | description | sensitive |
|
|
|---|---|:---:|
|
|
| [bucket](outputs.tf#L17) | Bucket resource. | |
|
|
| [id](outputs.tf#L28) | Fully qualified bucket id. | |
|
|
| [name](outputs.tf#L37) | Bucket name. | |
|
|
| [notification](outputs.tf#L46) | GCS Notification self link. | |
|
|
| [topic](outputs.tf#L51) | Topic ID used by GCS. | |
|
|
| [url](outputs.tf#L56) | Bucket URL. | |
|
|
|
|
<!-- END TFDOC -->
|