ai-workspace-infra/iac_modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make state bucket creation optional

Browse Source
This commit is contained in:
cloudneutral 2025-12-11 01:12:19 +08:00
parent 3d6d1172ce
commit 9e65268653
4 changed files with 23 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
iac-template/terraform-hcl-standard/aws-cloud/bootstrap/state/locals.tf
View File

@ -5,4 +5,7 @@ locals {
region = coalesce(var.region, local.bootstrap.region)
environment = try(local.bootstrap.environment, "bootstrap")
tags = try(local.bootstrap.tags, {})
bucket_arn = var.create_bucket ? aws_s3_bucket.state[0].arn : data.aws_s3_bucket.existing[0].arn
bucket_id = var.create_bucket ? aws_s3_bucket.state[0].id : data.aws_s3_bucket.existing[0].id
}

15
iac-template/terraform-hcl-standard/aws-cloud/bootstrap/state/main.tf
View File

@ -1,4 +1,5 @@
resource "aws_s3_bucket" "state" {
count = var.create_bucket ? 1 : 0
bucket = local.bucket_name
tags = merge(
@ -10,8 +11,14 @@ resource "aws_s3_bucket" "state" {
)
}
data "aws_s3_bucket" "existing" {
count = var.create_bucket ? 0 : 1
bucket = local.bucket_name
}
resource "aws_s3_bucket_versioning" "versioning" {
bucket = aws_s3_bucket.state.id
count = var.create_bucket ? 1 : 0
bucket = local.bucket_id
versioning_configuration {
status = "Enabled"
@ -19,7 +26,8 @@ resource "aws_s3_bucket_versioning" "versioning" {
}
resource "aws_s3_bucket_server_side_encryption_configuration" "sse" {
bucket = aws_s3_bucket.state.id
count = var.create_bucket ? 1 : 0
bucket = local.bucket_id
rule {
apply_server_side_encryption_by_default {
@ -29,7 +37,8 @@ resource "aws_s3_bucket_server_side_encryption_configuration" "sse" {
}
resource "aws_s3_bucket_public_access_block" "block" {
bucket = aws_s3_bucket.state.id
count = var.create_bucket ? 1 : 0
bucket = local.bucket_id
block_public_acls = true
block_public_policy = true

4
iac-template/terraform-hcl-standard/aws-cloud/bootstrap/state/outputs.tf
View File

@ -1,9 +1,9 @@
output "bucket_name" {
value = aws_s3_bucket.state.bucket
value = local.bucket_name
}
output "bucket_arn" {
value = aws_s3_bucket.state.arn
value = local.bucket_arn
description = "ARN of the Terraform state bucket"
}

6
iac-template/terraform-hcl-standard/aws-cloud/bootstrap/state/variables.tf
View File

@ -15,3 +15,9 @@ variable "bootstrap_config_path" {
type = string
default = "../../config/accounts/bootstrap.yaml"
}
variable "create_bucket" {
description = "Whether to create the Terraform state bucket. Set to false to use an existing bucket."
type = bool
default = true
}