Fix variable/output sort check

This commit is contained in:
Julio Castillo
2022-11-18 17:48:16 +01:00
parent f26e8646a9
commit 2e700db8a7
30 changed files with 416 additions and 407 deletions

View File

@@ -61,19 +61,19 @@ module "binauthz" {
| name | description | type | required | default |
|---|---|:---:|:---:|:---:|
| [project_id](variables.tf#L17) | Project ID. | <code>string</code> | ✓ | |
| [admission_whitelist_patterns](variables.tf#L28) | An image name pattern to allowlist | <code>list&#40;string&#41;</code> | | <code>null</code> |
| [attestors_config](variables.tf#L58) | Attestors configuration | <code title="map&#40;object&#40;&#123;&#10; note_reference &#61; string&#10; iam &#61; map&#40;list&#40;string&#41;&#41;&#10; pgp_public_keys &#61; list&#40;string&#41;&#10; pkix_public_keys &#61; list&#40;object&#40;&#123;&#10; id &#61; string&#10; public_key_pem &#61; string&#10; signature_algorithm &#61; string&#10; &#125;&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>null</code> |
| [cluster_admission_rules](variables.tf#L48) | Admission rules | <code title="map&#40;object&#40;&#123;&#10; evaluation_mode &#61; string&#10; enforcement_mode &#61; string&#10; attestors &#61; list&#40;string&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>null</code> |
| [default_admission_rule](variables.tf#L34) | Default admission rule | <code title="object&#40;&#123;&#10; evaluation_mode &#61; string&#10; enforcement_mode &#61; string&#10; attestors &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code title="&#123;&#10; evaluation_mode &#61; &#34;ALWAYS_ALLOW&#34;&#10; enforcement_mode &#61; &#34;ENFORCED_BLOCK_AND_AUDIT_LOG&#34;&#10; attestors &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
| [global_policy_evaluation_mode](variables.tf#L22) | Global policy evaluation mode. | <code>string</code> | | <code>null</code> |
| [project_id](variables.tf#L68) | Project ID. | <code>string</code> | ✓ | |
| [admission_whitelist_patterns](variables.tf#L17) | An image name pattern to allowlist | <code>list&#40;string&#41;</code> | | <code>null</code> |
| [attestors_config](variables.tf#L23) | Attestors configuration | <code title="map&#40;object&#40;&#123;&#10; note_reference &#61; string&#10; iam &#61; map&#40;list&#40;string&#41;&#41;&#10; pgp_public_keys &#61; list&#40;string&#41;&#10; pkix_public_keys &#61; list&#40;object&#40;&#123;&#10; id &#61; string&#10; public_key_pem &#61; string&#10; signature_algorithm &#61; string&#10; &#125;&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>null</code> |
| [cluster_admission_rules](variables.tf#L38) | Admission rules | <code title="map&#40;object&#40;&#123;&#10; evaluation_mode &#61; string&#10; enforcement_mode &#61; string&#10; attestors &#61; list&#40;string&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | | <code>null</code> |
| [default_admission_rule](variables.tf#L48) | Default admission rule | <code title="object&#40;&#123;&#10; evaluation_mode &#61; string&#10; enforcement_mode &#61; string&#10; attestors &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | | <code title="&#123;&#10; evaluation_mode &#61; &#34;ALWAYS_ALLOW&#34;&#10; enforcement_mode &#61; &#34;ENFORCED_BLOCK_AND_AUDIT_LOG&#34;&#10; attestors &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
| [global_policy_evaluation_mode](variables.tf#L62) | Global policy evaluation mode. | <code>string</code> | | <code>null</code> |
## Outputs
| name | description | sensitive |
|---|---|:---:|
| [attestors](outputs.tf#L22) | Attestors. | |
| [id](outputs.tf#L17) | Binary Authorization policy ID | |
| [attestors](outputs.tf#L17) | Attestors. | |
| [id](outputs.tf#L25) | Binary Authorization policy ID | |
| [notes](outputs.tf#L30) | Notes. | |
<!-- END TFDOC -->

View File

@@ -14,11 +14,6 @@
* limitations under the License.
*/
output "id" {
description = "Binary Authorization policy ID"
value = google_binary_authorization_policy.policy.id
}
output "attestors" {
description = "Attestors."
value = google_binary_authorization_attestor.attestors
@@ -27,6 +22,11 @@ output "attestors" {
]
}
output "id" {
description = "Binary Authorization policy ID"
value = google_binary_authorization_policy.policy.id
}
output "notes" {
description = "Notes."
value = google_container_analysis_note.notes

View File

@@ -14,47 +14,12 @@
* limitations under the License.
*/
variable "project_id" {
description = "Project ID."
type = string
}
variable "global_policy_evaluation_mode" {
description = "Global policy evaluation mode."
type = string
default = null
}
variable "admission_whitelist_patterns" {
description = "An image name pattern to allowlist"
type = list(string)
default = null
}
variable "default_admission_rule" {
description = "Default admission rule"
type = object({
evaluation_mode = string
enforcement_mode = string
attestors = list(string)
})
default = {
evaluation_mode = "ALWAYS_ALLOW"
enforcement_mode = "ENFORCED_BLOCK_AND_AUDIT_LOG"
attestors = null
}
}
variable "cluster_admission_rules" {
description = "Admission rules"
type = map(object({
evaluation_mode = string
enforcement_mode = string
attestors = list(string)
}))
default = null
}
variable "attestors_config" {
description = "Attestors configuration"
type = map(object({
@@ -69,3 +34,38 @@ variable "attestors_config" {
}))
default = null
}
variable "cluster_admission_rules" {
description = "Admission rules"
type = map(object({
evaluation_mode = string
enforcement_mode = string
attestors = list(string)
}))
default = null
}
variable "default_admission_rule" {
description = "Default admission rule"
type = object({
evaluation_mode = string
enforcement_mode = string
attestors = list(string)
})
default = {
evaluation_mode = "ALWAYS_ALLOW"
enforcement_mode = "ENFORCED_BLOCK_AND_AUDIT_LOG"
attestors = null
}
}
variable "global_policy_evaluation_mode" {
description = "Global policy evaluation mode."
type = string
default = null
}
variable "project_id" {
description = "Project ID."
type = string
}