You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: modules/simple_bucket/metadata.yaml
+21-4
Original file line number
Diff line number
Diff line change
@@ -47,7 +47,7 @@ spec:
47
47
varType: string
48
48
required: true
49
49
- name: location
50
-
description: The location of the bucket.
50
+
description: The location of the bucket. See https://cloud.google.com/storage/docs/locations.
51
51
varType: string
52
52
required: true
53
53
- name: storage_class
@@ -109,7 +109,7 @@ spec:
109
109
varType: any
110
110
defaultValue: []
111
111
- name: encryption
112
-
description: A Cloud KMS key that will be used to encrypt objects inserted into this bucket. If default_kms_key_name is set to 'null' a new keyring and key pair will be created and used to encrypt bucket using CMEK.
112
+
description: A Cloud KMS key that will be used to encrypt objects inserted into this bucket. To use a Cloud KMS key automatically created by the module use `internal_encryption_config`.
113
113
varType: |-
114
114
object({
115
115
default_kms_key_name = string
@@ -155,7 +155,23 @@ spec:
155
155
retention_duration_seconds = optional(number)
156
156
})
157
157
defaultValue: {}
158
+
- name: internal_encryption_config
159
+
description: " Configuration for the creation of an internal Google Cloud Key Management Service (KMS) Key for use as Customer-managed encryption key (CMEK) for the GCS Bucket\n instead of creating one in advance and providing the key in the variable `encryption.default_kms_key_name`.\n create_encryption_key: If `true` a Google Cloud Key Management Service (KMS) KeyRing and a Key will be created\n prevent_destroy: Set the prevent_destroy lifecycle attribute on keys.\n key_destroy_scheduled_duration: Set the period of time that versions of keys spend in the `DESTROY_SCHEDULED` state before transitioning to `DESTROYED`.\n key_rotation_period: Generate a new key every time this period passes.\n"
0 commit comments