Files
hunfabric/tests/modules/cloudsql_instance/examples/custom.yaml
Simon Roberts 642ebfe9e9 Increase the default complexity of Cloud SQL DB passwords (#2886)
* Increase the default complexity of DB passwords in order to meet password_validation_policy.default_complexity

* Use password_validation_policy.min_length if provided

* Explicitly generate a root_password if not provided

* Use object (password, random_password) for root_password config

* Make root_password non-nullable, and add validation against specifying both a password and `random_password`.
Fix test for stronger password generation.

* Add example for root_password and password_validation_policy

* Rerun tfdoc.py

---------

Co-authored-by: Julio Castillo <jccb@google.com>
2025-02-18 10:46:29 +00:00

67 lines
1.9 KiB
YAML

# Copyright 2023 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
values:
module.db.google_sql_database.databases["departments"]:
deletion_policy: DELETE
instance: db
name: departments
project: project-id
module.db.google_sql_database.databases["people"]:
deletion_policy: DELETE
instance: db
name: people
project: project-id
module.db.google_sql_database_instance.primary: {}
module.db.google_sql_user.users["fixture-service-account@project-id.iam.gserviceaccount.com"]:
instance: db
name: fixture-service-account@project-id.iam.gserviceaccount.com
password: null
password_policy: []
project: project-id
type: CLOUD_IAM_SERVICE_ACCOUNT
module.db.google_sql_user.users["user1"]:
deletion_policy: null
instance: db
name: user1
password_policy: []
project: project-id
type: null
module.db.google_sql_user.users["user2"]:
deletion_policy: null
instance: db
name: user2
password_policy: []
project: project-id
type: null
module.db.random_password.passwords["user1"]:
keepers: null
length: 16
lower: true
min_lower: 1
min_numeric: 1
min_special: 1
min_upper: 1
number: true
numeric: true
override_special: null
special: true
upper: true
counts:
google_sql_database: 2
google_sql_database_instance: 1
google_sql_user: 3
modules: 2