terraspace_plugin_azurerm 0.3.3 → 0.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 33dd9bb20fc1cc57ccd1e31f46e52621838ad043b118e67061b0c7b0bf96bf9c
-  data.tar.gz: c3721a61c30ad15870c1858ada72199380c9628572f80a3a0576750266a65b90
+  metadata.gz: 8c595d865e64d26fdc4fa827ef247aae21266701bdf2afcf5438c6458d50d96e
+  data.tar.gz: a3bdfe44206f463c945d5f416c81529d77c9507b676f27654b1071aa6da0c7fd
 SHA512:
-  metadata.gz: 442becc7f22e2b5b3bf1dc6c621a1dd52af1d4696934c3e6fd9dfc83e4f5d723fb5b5aceb29d24ef47b5b7be939a2676d8d205f77422618a31c8f381ce5d468a
-  data.tar.gz: 3e10754d0616e4877c34435cf30da1452eb58cafa938d82d3326ded07670b01cf202d11410ea114a3bb21dc177acadaf9dc4a05b3a524108bb5865ad3fe16d62
+  metadata.gz: 67fdfe608c63b99cea0b1dfa29cc131c68df2b8651428800fb9d085aba3747bd99d29757551b74828693d323f7378cd580bd38b5b195a43920f7c844d3409a70
+  data.tar.gz: b675685420ced87b9b21504b011d332987569a2cc94ff91de6cde41ca8e6a5dd72ec99e2551274de45bc1ed537c75e4a2c76e565e23018b8a86843cbd73c7416

data/CHANGELOG.md

@@ -3,6 +3,11 @@
 All notable changes to this project will be documented in this file.
 This project *loosely tries* to adhere to [Semantic Versioning](http://semver.org/).
 
+## [0.4.0] - 2022-01-05
+- [#11](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/11) fix tags config in README
+- [#13](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/13) data management and security features
+- [#8](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/8) Add config.tags
+
 ## [0.3.3] - 2022-01-04
 - [#10](https://github.com/boltops-tools/terraspace_plugin_azurerm/pull/10) azure_secret support expansion automatically
 

data/README.md

@@ -22,6 +22,8 @@ TerraspacePluginAzurerm.configure do |config|
 
   config.storage_account.sku.name = "Standard_LRS"
   config.storage_account.sku.tier = "Standard"
+
+  config.tags = {env: Terraspace.env, terraspace: true}
 end
 ```
 

data/lib/terraspace_plugin_azurerm/clients/options.rb

@@ -3,18 +3,6 @@ module TerraspacePluginAzurerm::Clients
     extend Memoist
 
     def client_options
-      o = base_client_options
-      o[:credentials] = credentials
-      o
-    end
-
-    def credentials
-      o = base_client_options
-      provider = MsRestAzure::ApplicationTokenProvider.new(o[:tenant_id], o[:client_id], o[:client_secret])
-      MsRest::TokenCredentials.new(provider)
-    end
-
-    def base_client_options
       # AZURE_* is used by ruby generally.
       # ARM_* is used by Terraform azurerm provider: https://www.terraform.io/docs/providers/azurerm/index.html
       # Favor ARM_ because this plugin is designed for Terraspace.
@@ -32,7 +20,7 @@ module TerraspacePluginAzurerm::Clients
       validate_base_options!(o)
       o
     end
-    memoize :base_client_options
+    memoize :client_options
 
     def validate_base_options!(options)
       vars = []

data/lib/terraspace_plugin_azurerm/clients/storage.rb

@@ -6,12 +6,10 @@ module TerraspacePluginAzurerm::Clients
     extend Memoist
 
     # Include SDK modules to ease access to Storage classes.
-    include Azure::Storage::Mgmt::V2019_06_01
-    include Azure::Storage::Mgmt::V2019_06_01::Models
+    include Azure::Storage::Profiles::Latest::Mgmt
+    include Azure::Storage::Profiles::Latest::Mgmt::Models
 
-    def storage_accounts
-      mgmt.storage_accounts
-    end
+    delegate :storage_accounts, :blob_services, :blob_containers, to: :mgmt
 
     def blob_containers
       BlobContainers.new(mgmt)
@@ -19,7 +17,7 @@ module TerraspacePluginAzurerm::Clients
     memoize :blob_containers
 
     def mgmt
-      client = StorageManagementClient.new(credentials)
+      client = Client.new(client_options)
       client.subscription_id = client_options[:subscription_id]
       client
     end

data/lib/terraspace_plugin_azurerm/interfaces/backend/resource_group_creator.rb

@@ -20,6 +20,7 @@ class TerraspacePluginAzurerm::Interfaces::Backend
       resource_group = ResourceGroup.new
       resource_group.name = @resource_group_name
       resource_group.location = config.location || AzureInfo.location
+      resource_group.tags = config.tags
       resource_groups.create_or_update(@resource_group_name, resource_group)
     end
 

data/lib/terraspace_plugin_azurerm/interfaces/backend/storage_account.rb

@@ -6,8 +6,11 @@ class TerraspacePluginAzurerm::Interfaces::Backend
     def create
       if exist?
         logger.debug "Storage Account #{@storage_account_name} already exists"
+        update_storage_account if config.storage_account.update_existing
+        set_blob_service_properties if config.storage_account.configure_data_protection_for_existing
       else
         create_storage_account
+        set_blob_service_properties
       end
     end
 
@@ -32,16 +35,29 @@ class TerraspacePluginAzurerm::Interfaces::Backend
       end
     end
 
+    def update_storage_account
+      logger.debug "Updating Storage Account #{@storage_account_name}..."
+      storage_accounts.update(@resource_group_name, @storage_account_name, storage_account_update_params)
+    end
+
     def create_storage_account
       logger.info "Creating Storage Account #{@storage_account_name}..."
-      storage_accounts.create(@resource_group_name, @storage_account_name, storage_account_params)
+      storage_accounts.create(@resource_group_name, @storage_account_name, storage_account_create_params)
     end
 
-    def storage_account_params
+    def storage_account_create_params
       params = StorageAccountCreateParameters.new
       params.location = config.location || azure_info.location # IE: eastus
       params.sku = sku
+      params.allow_blob_public_access = config.storage_account.allow_blob_public_access
       params.kind = Kind::StorageV2
+      params.tags = config.tags
+      params
+    end
+
+    def storage_account_update_params
+      params = StorageAccountUpdateParameters.new
+      params.allow_blob_public_access = config.storage_account.allow_blob_public_access
       params
     end
 
@@ -51,5 +67,27 @@ class TerraspacePluginAzurerm::Interfaces::Backend
       sku.tier = config.storage_account.sku.tier
       sku
     end
+
+    def set_blob_service_properties
+      blob_services.set_service_properties(@resource_group_name, @storage_account_name, blob_service_properties)
+    end
+
+    def blob_service_properties
+      props = BlobServiceProperties.new
+
+      sa = config.storage_account
+      policy = DeleteRetentionPolicy.new
+      policy.days = sa.container_delete_retention_policy.days || sa.delete_retention_policy.days
+      policy.enabled = sa.container_delete_retention_policy.enabled || sa.delete_retention_policy.enabled
+      props.container_delete_retention_policy = policy # containers
+
+      policy = DeleteRetentionPolicy.new
+      policy.days = sa.blob_delete_retention_policy.days || sa.delete_retention_policy.days
+      policy.enabled = sa.blob_delete_retention_policy.enabled || sa.delete_retention_policy.enabled
+      props.delete_retention_policy = policy # blobs
+
+      props.is_versioning_enabled = sa.is_versioning_enabled
+      props
+    end
   end
 end

data/lib/terraspace_plugin_azurerm/interfaces/config.rb

@@ -13,14 +13,36 @@ module TerraspacePluginAzurerm::Interfaces
     # must return an ActiveSupport::OrderedOptions
     def defaults
       c = ActiveSupport::OrderedOptions.new
+
       c.auto_create = true
       c.location = nil # AzureInfo.location not assigned here so it can be lazily inferred
+
       c.secrets = ActiveSupport::OrderedOptions.new
       c.secrets.vault = nil
+
       c.storage_account = ActiveSupport::OrderedOptions.new
+      c.storage_account.update_existing = false
       c.storage_account.sku = ActiveSupport::OrderedOptions.new
       c.storage_account.sku.name = "Standard_LRS"
       c.storage_account.sku.tier = "Standard"
+      c.storage_account.allow_blob_public_access = false # Azure default is true
+
+      # data protection management
+      c.storage_account.configure_data_protection_for_existing = false
+      c.storage_account.delete_retention_policy = ActiveSupport::OrderedOptions.new
+      c.storage_account.delete_retention_policy.days = 365
+      c.storage_account.delete_retention_policy.enabled = true
+      # overrides the setting above
+      c.storage_account.blob_delete_retention_policy = ActiveSupport::OrderedOptions.new
+      c.storage_account.blob_delete_retention_policy.days = nil
+      c.storage_account.blob_delete_retention_policy.enabled = nil
+      c.storage_account.container_delete_retention_policy = ActiveSupport::OrderedOptions.new
+      c.storage_account.container_delete_retention_policy.days = nil
+      c.storage_account.container_delete_retention_policy.enabled = nil
+      c.storage_account.is_versioning_enabled = true
+
+      c.tags = {}
+
       c
     end
   end

data/lib/terraspace_plugin_azurerm/version.rb

@@ -1,3 +1,3 @@
 module TerraspacePluginAzurerm
-  VERSION = "0.3.3"
+  VERSION = "0.4.0"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: terraspace_plugin_azurerm
 version: !ruby/object:Gem::Version
-  version: 0.3.3
+  version: 0.4.0
 platform: ruby
 authors:
 - Tung Nguyen
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2022-01-04 00:00:00.000000000 Z
+date: 2022-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: azure-storage-blob