-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
add signed url key resource/fields for backend bucket
- Loading branch information
Showing
7 changed files
with
323 additions
and
59 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
17 changes: 17 additions & 0 deletions
17
templates/terraform/examples/backend_bucket_signed_url_key.tf.erb
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,17 @@ | ||
| resource "google_compute_backend_bucket_signed_url_key" "backend_key" { | ||
| name = "<%= ctx[:vars]['key_name'] %>" | ||
| key_value = "pPsVemX8GM46QVeezid6Rw==" | ||
| backend_bucket = "${google_compute_backend_bucket.test_backend.name}" | ||
| } | ||
|
|
||
| resource "google_compute_backend_bucket" "test_backend" { | ||
| name = "<%= ctx[:vars]['backend_name'] %>" | ||
| description = "Contains beautiful images" | ||
| bucket_name = "${google_storage_bucket.bucket.name}" | ||
| enable_cdn = true | ||
| } | ||
|
|
||
| resource "google_storage_bucket" "bucket" { | ||
| name = "<%= ctx[:vars]['bucket_name'] %>" | ||
| location = "EU" | ||
| } |
119 changes: 119 additions & 0 deletions
119
third_party/terraform/tests/resource_compute_backend_bucket_signed_url_key_test.go
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,119 @@ | ||
| package google | ||
|
|
||
| import ( | ||
| "fmt" | ||
| "testing" | ||
|
|
||
| "github.com/hashicorp/terraform/helper/acctest" | ||
| "github.com/hashicorp/terraform/helper/resource" | ||
| "github.com/hashicorp/terraform/terraform" | ||
| "strings" | ||
| ) | ||
|
|
||
| func TestAccComputeBackendBucketSignedUrlKey_basic(t *testing.T) { | ||
| t.Parallel() | ||
|
|
||
| context := map[string]interface{}{ | ||
| "random_suffix": acctest.RandString(10), | ||
| } | ||
|
|
||
| resource.Test(t, resource.TestCase{ | ||
| PreCheck: func() { testAccPreCheck(t) }, | ||
| Providers: testAccProviders, | ||
| CheckDestroy: testAccCheckComputeBackendBucketSignedUrlKeyDestroy, | ||
| Steps: []resource.TestStep{ | ||
| { | ||
| Config: testAccComputeBackendBucketSignedUrlKey_basic(context), | ||
| Check: testAccCheckComputeBackendBucketSignedUrlKeyCreated, | ||
| }, | ||
| }, | ||
| }) | ||
| } | ||
|
|
||
| func testAccComputeBackendBucketSignedUrlKey_basic(context map[string]interface{}) string { | ||
| return Nprintf(` | ||
| resource "google_compute_backend_bucket_signed_url_key" "backend_key" { | ||
| name = "test-key-%{random_suffix}" | ||
| key_value = "iAmAFakeKeyRandomBytes==" | ||
| backend_bucket = "${google_compute_backend_bucket.test_backend.name}" | ||
| } | ||
| resource "google_compute_backend_bucket" "test_backend" { | ||
| name = "test-signed-backend-bucket-%{random_suffix}" | ||
| description = "Contains beautiful images" | ||
| bucket_name = "${google_storage_bucket.bucket.name}" | ||
| enable_cdn = true | ||
| } | ||
| resource "google_storage_bucket" "bucket" { | ||
| name = "test-storage-bucket-%{random_suffix}" | ||
| location = "EU" | ||
| } | ||
| `, context) | ||
| } | ||
|
|
||
| func testAccCheckComputeBackendBucketSignedUrlKeyDestroy(s *terraform.State) error { | ||
| exists, err := checkComputeBackendBucketSignedUrlKeyExists(s) | ||
| if err != nil && !isGoogleApiErrorWithCode(err, 404) { | ||
| return err | ||
| } | ||
| if exists { | ||
| return fmt.Errorf("ComputeBackendBucketSignedUrlKey still exists") | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func testAccCheckComputeBackendBucketSignedUrlKeyCreated(s *terraform.State) error { | ||
| exists, err := checkComputeBackendBucketSignedUrlKeyExists(s) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if !exists { | ||
| return fmt.Errorf("expected ComputeBackendBucketSignedUrlKey to have been created") | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func checkComputeBackendBucketSignedUrlKeyExists(s *terraform.State) (bool, error) { | ||
| for name, rs := range s.RootModule().Resources { | ||
| if rs.Type != "google_compute_backend_bucket_signed_url_key" { | ||
| continue | ||
| } | ||
| if strings.HasPrefix(name, "data.") { | ||
| continue | ||
| } | ||
|
|
||
| config := testAccProvider.Meta().(*Config) | ||
| keyName := rs.Primary.ID | ||
|
|
||
| url, err := replaceVarsForTest(rs, "https://www.googleapis.com/compute/v1/projects/{{project}}/global/backendBuckets/{{backend_bucket}}") | ||
| if err != nil { | ||
| return false, err | ||
| } | ||
|
|
||
| res, err := sendRequest(config, "GET", url, nil) | ||
| if err == nil { | ||
| policyRaw, ok := res["cdnPolicy"] | ||
| if !ok { | ||
| return false, nil | ||
| } | ||
|
|
||
| policy := policyRaw.(map[string]interface{}) | ||
| keyNames, ok := policy["signedUrlKeyNames"] | ||
| if !ok { | ||
| return false, nil | ||
| } | ||
|
|
||
| // Because the sensitive key value is not returned, all we can do is verify a | ||
| // key with this name exists and assume the key value hasn't been changed. | ||
| for _, k := range keyNames.([]interface{}) { | ||
| if k.(string) == keyName { | ||
| // Just return empty map to indicate key was found | ||
| return true, nil | ||
| } | ||
| } | ||
| } | ||
| } | ||
|
|
||
| return false, nil | ||
| } |
Oops, something went wrong.