kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[secure-source-manager-instance] Allow provisioning of instances with managed certificates (#3310)

Browse Source
This commit is contained in:
Luca Prete
2025-09-08 17:53:46 +02:00
committed by GitHub
parent eff8799303
commit 2262ab6cc1
14 changed files with 162 additions and 46 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tests/modules/secure_source_manager_instance/examples/branch-protection-rules.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -28,19 +28,23 @@ values:
require_pull_request: true
timeouts: null
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -53,4 +57,4 @@ counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_repository: 1
modules: 1
resources: 3
resources: 3

13
tests/modules/secure_source_manager_instance/examples/iam-bindings-additive.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,25 +14,31 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_instance_iam_binding.bindings["my-instance-admin"]:
condition: []
instance_id: my-instance
location: europe-west8
members:
- group:my-instance-admins@myorg.com
project: project-id
role: roles/securesourcemanager.instanceOwner
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -41,6 +47,7 @@ values:
timeouts: null
module.ssm_instance.google_secure_source_manager_repository_iam_binding.bindings["my-repository.my-repository-admin"]:
condition: []
location: europe-west8
members:
- group:my-repo-admins@myorg.com
project: project-id
@@ -53,4 +60,4 @@ counts:
google_secure_source_manager_repository: 1
google_secure_source_manager_repository_iam_binding: 1
modules: 1
resources: 4
resources: 4

21
tests/modules/secure_source_manager_instance/examples/iam-bindings.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,24 +14,30 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_instance_iam_member.bindings["my-instance-admin"]:
condition: []
instance_id: my-instance
location: europe-west8
member: group:my-instance-admins@myorg.com
project: project-id
role: roles/securesourcemanager.instanceOwner
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -40,7 +46,16 @@ values:
timeouts: null
module.ssm_instance.google_secure_source_manager_repository_iam_member.bindings["my-repository.my-repository-admin"]:
condition: []
location: europe-west8
member: group:my-repo-admins@myorg.com
project: project-id
repository_id: my-repository
role: roles/securesourcemanager.repoAdmin
role: roles/securesourcemanager.repoAdmin
counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_instance_iam_member: 1
google_secure_source_manager_repository: 1
google_secure_source_manager_repository_iam_member: 1
modules: 1
resources: 4

13
tests/modules/secure_source_manager_instance/examples/iam.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,25 +14,31 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
? module.ssm_instance.google_secure_source_manager_instance_iam_binding.authoritative["roles/securesourcemanager.instanceOwner"]
: condition: []
instance_id: my-instance
location: europe-west8
members:
- group:my-instance-admins@myorg.com
project: project-id
role: roles/securesourcemanager.instanceOwner
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -41,6 +47,7 @@ values:
timeouts: null
? module.ssm_instance.google_secure_source_manager_repository_iam_binding.authoritative["my-repository.roles/securesourcemanager.repoAdmin"]
: condition: []
location: europe-west8
members:
- group:my-repo-admins@myorg.com
project: project-id
@@ -53,4 +60,4 @@ counts:
google_secure_source_manager_repository: 1
google_secure_source_manager_repository_iam_binding: 1
modules: 1
resources: 4
resources: 4

45
tests/modules/secure_source_manager_instance/examples/private-instance-ca-pool.yaml Normal file
View File

@@ -0,0 +1,45 @@
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config:
- ca_pool: projects/another-project/locations/europe-west8/caPools/my-ca-pool
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
project: project-id
repository_id: my-repository
timeouts: null
counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_repository: 1
modules: 1
resources: 2

9
tests/modules/secure_source_manager_instance/examples/private-instance.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,6 +14,7 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
@@ -21,13 +22,15 @@ values:
labels: null
location: europe-west8
private_config:
- ca_pool: projects/another-project/locations/europe-west8/caPools/my-ca-pool
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -39,4 +42,4 @@ counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_repository: 1
modules: 1
resources: 2
resources: 2

11
tests/modules/secure_source_manager_instance/examples/public-instance-with-cmek.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,18 +14,23 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: projects/another-project-id/locations/europe-west8/keyRings/my-key-ring/cryptoKeys/my-key
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -37,4 +42,4 @@ counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_repository: 1
modules: 1
resources: 2
resources: 2

11
tests/modules/secure_source_manager_instance/examples/public-instance.yaml
View File

@@ -1,4 +1,4 @@
# Copyright 2024 Google LLC
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
@@ -14,18 +14,23 @@
values:
module.ssm_instance.google_secure_source_manager_instance.instance[0]:
deletion_policy: PREVENT
effective_labels:
goog-terraform-provisioned: 'true'
instance_id: my-instance
kms_key: null
labels: null
location: europe-west8
private_config: []
private_config:
- ca_pool: null
is_private: true
project: project-id
terraform_labels:
goog-terraform-provisioned: 'true'
timeouts: null
workforce_identity_federation_config: []
module.ssm_instance.google_secure_source_manager_repository.repositories["my-repository"]:
deletion_policy: PREVENT
description: null
initial_config: []
location: europe-west8
@@ -37,4 +42,4 @@ counts:
google_secure_source_manager_instance: 1
google_secure_source_manager_repository: 1
modules: 1
resources: 2
resources: 2