Changes in IAM to GCS module

tests/modules/gcs/examples/iam-authoritative.yaml

@@ -0,0 +1,47 @@
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.bucket.google_storage_bucket.bucket:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    encryption: []
+    force_destroy: false
+    labels: null
+    lifecycle_rule: []
+    location: EU
+    logging: []
+    name: my-bucket
+    project: myproject
+    requester_pays: null
+    retention_policy: []
+    storage_class: MULTI_REGIONAL
+    timeouts: null
+    uniform_bucket_level_access: true
+    versioning:
+    - enabled: false
+  module.bucket.google_storage_bucket_iam_binding.authoritative["roles/storage.admin"]:
+    bucket: my-bucket
+    condition: []
+    members:
+    - group:storage@example.com
+    role: roles/storage.admin
+
+counts:
+  google_storage_bucket: 1
+  google_storage_bucket_iam_binding: 1
+  modules: 1
+  resources: 2

tests/modules/gcs/examples/iam-bindings-additive.yaml

@@ -0,0 +1,49 @@
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.bucket.google_storage_bucket.bucket:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    encryption: []
+    force_destroy: false
+    labels: null
+    lifecycle_rule: []
+    location: EU
+    logging: []
+    name: my-bucket
+    project: myproject
+    requester_pays: null
+    retention_policy: []
+    storage_class: MULTI_REGIONAL
+    timeouts: null
+    uniform_bucket_level_access: true
+    versioning:
+    - enabled: false
+  module.bucket.google_storage_bucket_iam_member.bindings["storage-admin-with-delegated_roles"]:
+    bucket: my-bucket
+    condition:
+    - description: null
+      expression: api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly(['roles/storage.objectAdmin','roles/storage.objectViewer'])
+      title: delegated-role-grants
+    member: group:storage@example.com
+    role: roles/storage.admin
+
+counts:
+  google_storage_bucket: 1
+  google_storage_bucket_iam_member: 1
+  modules: 1
+  resources: 2

tests/modules/gcs/examples/iam-bindings.yaml

@@ -0,0 +1,50 @@
+# Copyright 2023 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.bucket.google_storage_bucket.bucket:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    encryption: []
+    force_destroy: false
+    labels: null
+    lifecycle_rule: []
+    location: EU
+    logging: []
+    name: my-bucket
+    project: myproject
+    requester_pays: null
+    retention_policy: []
+    storage_class: MULTI_REGIONAL
+    timeouts: null
+    uniform_bucket_level_access: true
+    versioning:
+    - enabled: false
+  module.bucket.google_storage_bucket_iam_binding.bindings["storage-admin-with-delegated_roles"]:
+    bucket: my-bucket
+    condition:
+    - description: null
+      expression: api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly(['roles/storage.objectAdmin','roles/storage.objectViewer'])
+      title: delegated-role-grants
+    members:
+    - group:storage@example.com
+    role: roles/storage.admin
+
+counts:
+  google_storage_bucket: 1
+  google_storage_bucket_iam_binding: 1
+  modules: 1
+  resources: 2

tests/modules/gcs/examples/simple.yaml

@@ -34,13 +34,6 @@ values:
     uniform_bucket_level_access: true
     versioning:
     - enabled: true
-  module.bucket.google_storage_bucket_iam_binding.bindings["roles/storage.admin"]:
-    bucket: test-my-bucket
-    condition: []
-    members:
-    - group:storage@example.com
-    role: roles/storage.admin
 
 counts:
-  google_storage_bucket: 1
-  google_storage_bucket_iam_binding: 1
+  google_storage_bucket: 1