Skip to content
This repository has been archived by the owner on Nov 14, 2024. It is now read-only.

Latest commit

 

History

History
59 lines (44 loc) · 2.3 KB

google_logging_project_sinks.md

File metadata and controls

59 lines (44 loc) · 2.3 KB
title platform
About the google_logging_project_sinks resource
gcp

Syntax

A google_logging_project_sinks is used to test a Google ProjectSink resource

Examples

describe google_logging_project_sinks(project: 'chef-gcp-inspec') do
  its('names') { should include 'inspec-gcp-org-sink' }
end

Test that there are no more than a specified number of sinks available for the project

describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
  its('count') { should be <= 100}
end

Test that an expected sink name is available for the project

describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
  its('sink_names') { should include "my-sink" }
end

Test that an expected sink destination is available for the project

describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
  its('sink_destinations') { should include "storage.googleapis.com/a-logging-bucket" }
end

Test that a subset of all sinks matching "project*" have a particular writer identity

google_logging_project_sinks(project: 'chef-inspec-gcp').where(sink_name: /project/).sink_names.each do |sink_name|
  describe google_logging_project_sink(project: 'chef-inspec-gcp',  sink: sink_name) do
    its('writer_identity') { should eq "serviceAccount:my-logging-service-account.iam.gserviceaccount.com" }
  end
end

Properties

Properties that can be accessed from the google_logging_project_sinks resource:

See google_logging_project_sink.md for more detailed information

  • projects: an array of google_logging_project_sink project
  • names: an array of google_logging_project_sink name
  • filters: an array of google_logging_project_sink filter
  • destinations: an array of google_logging_project_sink destination
  • writer_identities: an array of google_logging_project_sink writer_identity
  • include_children: an array of google_logging_project_sink include_children

Filter Criteria

This resource supports all of the above properties as filter criteria, which can be used with where as a block or a method.

GCP Permissions

Ensure the Stackdriver Logging API is enabled for the current project.