Java: DataTerraformRemoteStateGcsConfig

CDKTN Core API Reference for DataTerraformRemoteStateGcsConfig in Java.

Initializer

import io.cdktn.cdktn.DataTerraformRemoteStateGcsConfig;

DataTerraformRemoteStateGcsConfig.builder()
//  .defaults(java.util.Map<java.lang.String, java.lang.Object>)
//  .workspace(java.lang.String)
    .bucket(java.lang.String)
//  .accessToken(java.lang.String)
//  .credentials(java.lang.String)
//  .encryptionKey(java.lang.String)
//  .impersonateServiceAccount(java.lang.String)
//  .impersonateServiceAccountDelegates(java.util.List<java.lang.String>)
//  .kmsEncryptionKey(java.lang.String)
//  .prefix(java.lang.String)
//  .storeageCustomEndpoint(java.lang.String)
    .build();

Properties

Name	Type	Description
defaults	java.util.Map< java.lang.String, java.lang.Object >	No description.
workspace	java.lang.String	No description.
bucket	java.lang.String	(Required) The name of the GCS bucket.
accessToken	java.lang.String	(Optional) A temporary [OAuth 2.0 access token] obtained from the Google Authorization server, i.e. the Authorization: Bearer token used to authenticate HTTP requests to GCP APIs. This is an alternative to credentials. If both are specified, access_token will be used over the credentials field.
credentials	java.lang.String	(Optional) Local path to Google Cloud Platform account credentials in JSON format.
encryptionKey	java.lang.String	(Optional) A 32 byte base64 encoded ‘customer supplied encryption key’ used to encrypt all state.
impersonateServiceAccount	java.lang.String	(Optional) The service account to impersonate for accessing the State Bucket.
impersonateServiceAccountDelegates	java.util.List< java.lang.String >	(Optional) The delegation chain for an impersonating a service account.
kmsEncryptionKey	java.lang.String	(Optional) A Cloud KMS key (‘customer-managed encryption key’) used when reading and writing state files in the bucket.
prefix	java.lang.String	(Optional) GCS prefix inside the bucket.
storeageCustomEndpoint	java.lang.String	(Optional) A URL containing three parts: the protocol, the DNS name pointing to a Private Service Connect endpoint, and the path for the Cloud Storage API (/storage/v1/b).

---

defaults^Optional

public java.util.Map<java.lang.String, java.lang.Object> getDefaults();

• Type: java.util.Map< java.lang.String, java.lang.Object >

---

workspace^Optional

public java.lang.String getWorkspace();

• Type: java.lang.String

---

bucket^Required

public java.lang.String getBucket();

• Type: java.lang.String

(Required) The name of the GCS bucket.

This name must be globally unique.

---

accessToken^Optional

public java.lang.String getAccessToken();

• Type: java.lang.String

(Optional) A temporary [OAuth 2.0 access token] obtained from the Google Authorization server, i.e. the Authorization: Bearer token used to authenticate HTTP requests to GCP APIs. This is an alternative to credentials. If both are specified, access_token will be used over the credentials field.

---

credentials^Optional

public java.lang.String getCredentials();

• Type: java.lang.String

(Optional) Local path to Google Cloud Platform account credentials in JSON format.

If unset, Google Application Default Credentials are used. The provided credentials must have Storage Object Admin role on the bucket.

Warning: if using the Google Cloud Platform provider as well, it will also pick up the GOOGLE_CREDENTIALS environment variable.

---

encryptionKey^Optional

public java.lang.String getEncryptionKey();

• Type: java.lang.String

(Optional) A 32 byte base64 encoded ‘customer supplied encryption key’ used to encrypt all state.

---

impersonateServiceAccount^Optional

public java.lang.String getImpersonateServiceAccount();

• Type: java.lang.String

(Optional) The service account to impersonate for accessing the State Bucket.

You must have roles/iam.serviceAccountTokenCreator role on that account for the impersonation to succeed. If you are using a delegation chain, you can specify that using the impersonate_service_account_delegates field. Alternatively, this can be specified using the GOOGLE_IMPERSONATE_SERVICE_ACCOUNT environment variable.

---

impersonateServiceAccountDelegates^Optional

public java.util.List<java.lang.String> getImpersonateServiceAccountDelegates();

• Type: java.util.List< java.lang.String >

(Optional) The delegation chain for an impersonating a service account.

---

kmsEncryptionKey^Optional

public java.lang.String getKmsEncryptionKey();

• Type: java.lang.String

(Optional) A Cloud KMS key (‘customer-managed encryption key’) used when reading and writing state files in the bucket.

Format should be projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}/cryptoKeys/{{name}}. For more information, including IAM requirements, see Customer-managed Encryption Keys.

---

prefix^Optional

public java.lang.String getPrefix();

• Type: java.lang.String

(Optional) GCS prefix inside the bucket.

Named states for workspaces are stored in an object called < prefix >/< name >.tfstate.

---

storeageCustomEndpoint^Optional

public java.lang.String getStoreageCustomEndpoint();

• Type: java.lang.String

(Optional) A URL containing three parts: the protocol, the DNS name pointing to a Private Service Connect endpoint, and the path for the Cloud Storage API (/storage/v1/b).

See here for more details

---