Skip to content

Commit 8291ed6

Browse files
authored
feat: exposed the ability to skip COS / KMS s2s auth policy with new variable skip_cos_kms_auth_policy<br>- fixed bug where existing_cos_instance_crn was not being passed to COS module (#217)
1 parent 30de756 commit 8291ed6

File tree

2 files changed

+8
-0
lines changed

2 files changed

+8
-0
lines changed

solutions/standard/main.tf

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -85,6 +85,8 @@ module "cos" {
8585
version = "8.3.2"
8686
create_cos_instance = var.existing_cos_instance_crn == null ? true : false
8787
create_cos_bucket = var.existing_cos_bucket_name == null ? true : false
88+
existing_cos_instance_id = var.existing_cos_instance_crn
89+
skip_iam_authorization_policy = var.skip_cos_kms_auth_policy
8890
add_bucket_name_suffix = var.add_bucket_name_suffix
8991
resource_group_id = module.resource_group.resource_group_id
9092
region = local.cos_bucket_region

solutions/standard/variables.tf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -176,6 +176,12 @@ variable "skip_en_cos_auth_policy" {
176176
default = false
177177
}
178178

179+
variable "skip_cos_kms_auth_policy" {
180+
type = bool
181+
description = "Whether an IAM authorization policy is created for your Cloud Object Storage instance to read the encryption key from the KMS instance. Set to `true` to use an existing policy."
182+
default = false
183+
}
184+
179185
variable "cos_instance_name" {
180186
type = string
181187
default = "base-security-services-cos"

0 commit comments

Comments
 (0)