/** * Copyright 2024 Google LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ locals { bucket = try( google_logging_project_bucket_config.bucket[0], google_logging_folder_bucket_config.bucket[0], google_logging_organization_bucket_config.bucket[0], google_logging_billing_account_bucket_config.bucket[0], ) ctx = { for k, v in var.context : k => { for kk, vv in v : "${local.ctx_p}${k}:${kk}" => vv } if !endswith(k, "_vars") } ctx_p = "$" _tag_bindings = { for k, v in var.tag_bindings : k => lookup(local.ctx.tag_values, v, v) } location = lookup( local.ctx.locations, var.location, var.location ) parent_id = ( var.parent_type == "project" ? lookup(local.ctx.project_ids, var.parent, var.parent) : lookup(local.ctx.folder_ids, var.parent, var.parent) ) views = { for k, v in var.views : k => merge(v, { location = coalesce(v.location, var.location) }) } } resource "google_logging_project_bucket_config" "bucket" { count = var.parent_type == "project" ? 1 : 0 project = local.parent_id location = local.location retention_days = var.retention bucket_id = var.name description = var.description enable_analytics = var.log_analytics.enable locked = var.locked dynamic "cmek_settings" { for_each = var.kms_key_name == null ? [] : [""] content { kms_key_name = lookup(local.ctx.kms_keys, var.kms_key_name, var.kms_key_name) } } } resource "google_logging_folder_bucket_config" "bucket" { count = var.parent_type == "folder" ? 1 : 0 folder = local.parent_id location = local.location retention_days = var.retention bucket_id = var.name description = var.description } resource "google_logging_linked_dataset" "dataset" { count = var.log_analytics.dataset_link_id != null && var.parent_type == "project" ? 1 : 0 link_id = var.log_analytics.dataset_link_id parent = "projects/${google_logging_project_bucket_config.bucket[0].project}" bucket = google_logging_project_bucket_config.bucket[0].id location = local.location description = var.log_analytics.description } resource "google_logging_organization_bucket_config" "bucket" { count = var.parent_type == "organization" ? 1 : 0 organization = local.parent_id location = local.location retention_days = var.retention bucket_id = var.name description = var.description } resource "google_logging_billing_account_bucket_config" "bucket" { count = var.parent_type == "billing_account" ? 1 : 0 billing_account = local.parent_id location = local.location retention_days = var.retention bucket_id = var.name description = var.description } resource "google_logging_log_view" "views" { for_each = local.views name = each.key bucket = local.bucket.id description = each.value.description location = lookup( local.ctx.locations, each.value.location, each.value.location ) filter = each.value.filter } resource "google_tags_tag_binding" "binding" { for_each = var.tag_bindings parent = "//logging.googleapis.com/${local.bucket.id}" tag_value = templatestring(local._tag_bindings[each.key], var.context.tag_vars) }