-
Notifications
You must be signed in to change notification settings - Fork 0
/
variables.tf
252 lines (215 loc) · 9.99 KB
/
variables.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
/**
* Copyright 2018 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
variable "project_id" {
description = "Bucket project id."
type = string
}
variable "prefix" {
description = "Prefix used to generate the bucket name."
type = string
}
variable "names" {
description = "Bucket name suffixes."
type = list(string)
}
variable "randomize_suffix" {
description = "Adds an identical, but randomized 4-character suffix to all bucket names"
type = bool
default = false
}
variable "location" {
description = "Bucket location."
type = string
default = "EU"
}
variable "storage_class" {
description = "Bucket storage class."
type = string
default = "STANDARD"
}
variable "force_destroy" {
description = "Optional map of lowercase unprefixed name => boolean, defaults to false."
type = map(bool)
default = {}
}
variable "versioning" {
description = "Optional map of lowercase unprefixed name => boolean, defaults to false."
type = map(bool)
default = {}
}
variable "encryption_key_names" {
description = "Optional map of lowercase unprefixed name => string, empty strings are ignored."
type = map(string)
default = {}
}
variable "bucket_policy_only" {
description = "Disable ad-hoc ACLs on specified buckets. Defaults to true. Map of lowercase unprefixed name => boolean"
type = map(bool)
default = {}
}
variable "default_event_based_hold" {
description = "Enable event based hold to new objects added to specific bucket. Defaults to false. Map of lowercase unprefixed name => boolean"
type = map(bool)
default = {}
}
variable "admins" {
description = "IAM-style members who will be granted roles/storage.objectAdmin on all buckets."
type = list(string)
default = []
}
variable "creators" {
description = "IAM-style members who will be granted roles/storage.objectCreators on all buckets."
type = list(string)
default = []
}
variable "viewers" {
description = "IAM-style members who will be granted roles/storage.objectViewer on all buckets."
type = list(string)
default = []
}
variable "hmac_key_admins" {
description = "IAM-style members who will be granted roles/storage.hmacKeyAdmin on all buckets."
type = list(string)
default = []
}
variable "storage_admins" {
description = "IAM-style members who will be granted roles/storage.admin on all buckets."
type = list(string)
default = []
}
variable "bucket_admins" {
description = "Map of lowercase unprefixed name => comma-delimited IAM-style per-bucket admins."
type = map(string)
default = {}
}
variable "bucket_creators" {
description = "Map of lowercase unprefixed name => comma-delimited IAM-style per-bucket creators."
type = map(string)
default = {}
}
variable "bucket_viewers" {
description = "Map of lowercase unprefixed name => comma-delimited IAM-style per-bucket viewers."
type = map(string)
default = {}
}
variable "bucket_hmac_key_admins" {
description = "Map of lowercase unprefixed name => comma-delimited IAM-style per-bucket HMAC Key admins."
type = map(string)
default = {}
}
variable "bucket_storage_admins" {
description = "Map of lowercase unprefixed name => comma-delimited IAM-style per-bucket storage admins."
type = map(string)
default = {}
}
variable "labels" {
description = "Labels to be attached to the buckets"
type = map(string)
default = {}
}
variable "folders" {
description = "Map of lowercase unprefixed name => list of top level folder objects."
type = map(list(string))
default = {}
}
# we need flags to allow member lists to contain dynamic elements
variable "set_admin_roles" {
description = "Grant roles/storage.objectAdmin role to admins and bucket_admins."
type = bool
default = false
}
variable "set_creator_roles" {
description = "Grant roles/storage.objectCreator role to creators and bucket_creators."
type = bool
default = false
}
variable "set_viewer_roles" {
description = "Grant roles/storage.objectViewer role to viewers and bucket_viewers."
type = bool
default = false
}
variable "set_hmac_key_admin_roles" {
description = "Grant roles/storage.hmacKeyAdmin role to hmac_key_admins and bucket_hmac_key_admins."
type = bool
default = false
}
variable "set_storage_admin_roles" {
description = "Grant roles/storage.admin role to storage_admins and bucket_storage_admins."
type = bool
default = false
}
variable "lifecycle_rules" {
type = set(object({
# Object with keys:
# - type - The type of the action of this Lifecycle Rule. Supported values: Delete and SetStorageClass.
# - storage_class - (Required if action type is SetStorageClass) The target Storage Class of objects affected by this Lifecycle Rule.
action = map(string)
# Object with keys:
# - age - (Optional) Minimum age of an object in days to satisfy this condition.
# - created_before - (Optional) Creation date of an object in RFC 3339 (e.g. 2017-06-13) to satisfy this condition.
# - with_state - (Optional) Match to live and/or archived objects. Supported values include: "LIVE", "ARCHIVED", "ANY".
# - matches_storage_class - (Optional) Comma delimited string for storage class of objects to satisfy this condition. Supported values include: MULTI_REGIONAL, REGIONAL, NEARLINE, COLDLINE, STANDARD, DURABLE_REDUCED_AVAILABILITY.
# - num_newer_versions - (Optional) Relevant only for versioned objects. The number of newer versions of an object to satisfy this condition.
# - custom_time_before - (Optional) A date in the RFC 3339 format YYYY-MM-DD. This condition is satisfied when the customTime metadata for the object is set to an earlier date than the date used in this lifecycle condition.
# - days_since_custom_time - (Optional) The number of days from the Custom-Time metadata attribute after which this condition becomes true.
# - days_since_noncurrent_time - (Optional) Relevant only for versioned objects. Number of days elapsed since the noncurrent timestamp of an object.
# - noncurrent_time_before - (Optional) Relevant only for versioned objects. The date in RFC 3339 (e.g. 2017-06-13) when the object became nonconcurrent.
condition = map(string)
}))
description = "List of lifecycle rules to configure. Format is the same as described in provider documentation https://www.terraform.io/docs/providers/google/r/storage_bucket.html#lifecycle_rule except condition.matches_storage_class should be a comma delimited string."
default = []
}
variable "bucket_lifecycle_rules" {
type = map(set(object({
# Object with keys:
# - type - The type of the action of this Lifecycle Rule. Supported values: Delete and SetStorageClass.
# - storage_class - (Required if action type is SetStorageClass) The target Storage Class of objects affected by this Lifecycle Rule.
action = map(string)
# Object with keys:
# - age - (Optional) Minimum age of an object in days to satisfy this condition.
# - created_before - (Optional) Creation date of an object in RFC 3339 (e.g. 2017-06-13) to satisfy this condition.
# - with_state - (Optional) Match to live and/or archived objects. Supported values include: "LIVE", "ARCHIVED", "ANY".
# - matches_storage_class - (Optional) Comma delimited string for storage class of objects to satisfy this condition. Supported values include: MULTI_REGIONAL, REGIONAL, NEARLINE, COLDLINE, STANDARD, DURABLE_REDUCED_AVAILABILITY.
# - num_newer_versions - (Optional) Relevant only for versioned objects. The number of newer versions of an object to satisfy this condition.
# - custom_time_before - (Optional) A date in the RFC 3339 format YYYY-MM-DD. This condition is satisfied when the customTime metadata for the object is set to an earlier date than the date used in this lifecycle condition.
# - days_since_custom_time - (Optional) The number of days from the Custom-Time metadata attribute after which this condition becomes true.
# - days_since_noncurrent_time - (Optional) Relevant only for versioned objects. Number of days elapsed since the noncurrent timestamp of an object.
# - noncurrent_time_before - (Optional) Relevant only for versioned objects. The date in RFC 3339 (e.g. 2017-06-13) when the object became nonconcurrent.
condition = map(string)
})))
description = "Additionnal lifecycle_rules for specific buckets. Map of lowercase unprefixed name => list of lifecycle rules to configure."
default = {}
}
variable "cors" {
description = "Set of maps of mixed type attributes for CORS values. See appropriate attribute types here: https://www.terraform.io/docs/providers/google/r/storage_bucket.html#cors"
type = set(any)
default = []
}
variable "website" {
type = map(any)
default = {}
description = "Map of website values. Supported attributes: main_page_suffix, not_found_page"
}
variable "retention_policy" {
type = any
default = {}
description = "Map of retention policy values. Format is the same as described in provider documentation https://www.terraform.io/docs/providers/google/r/storage_bucket#retention_policy"
}
variable "logging" {
description = "Map of lowercase unprefixed name => bucket logging config object. Format is the same as described in provider documentation https://www.terraform.io/docs/providers/google/r/storage_bucket.html#logging"
type = any
default = {}
}