Bucket配置操作示例

Bucket ACL（访问控制权限）

创建Bucket并设置ACL为public-read。

resource "ksyun_ks3_bucket" "bucket-acl"{
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket"
  acl = "public-read"
}

Bucket StorageClass（存储类型）

创建Bucket并设置StorageClass为IA。

resource "ksyun_ks3_bucket" "bucket-storage-class"{
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket-storage-class"
  storage_class = "IA"
}

Bucket Policy（空间策略）

创建Bucket并设置Policy。

resource "ksyun_ks3_bucket" "bucket-policy"{
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket-policy"
  policy = <<-EOT
  {
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "ks3:ListBucket",
          "ks3:ListBucketMultipartUploads",
          "ks3:GetObject",
          "ks3:GetObjectAcl",
          "ks3:ListMultipartUploadParts"
        ],
        "Principal": {
          "KSC": [
            "*"
          ]
        },
        "Resource": [
          "krn:ksc:ks3:::terraform-test-bucket-policy/*",
          "krn:ksc:ks3:::terraform-test-bucket-policy"
        ]
      }
    ]
  }
  EOT
}

Bucket Logging（日志）

创建Bucket并设置Logging。

resource "ksyun_ks3_bucket" "bucket-logging" {
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket"
  logging {
    target_bucket = "test-target-bucket-logging"
    target_prefix = "log/"
  }
}

Bucket CORS（跨域资源共享）

创建Bucket并设置CORS。

resource "ksyun_ks3_bucket" "bucket-cors" {
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket-cors"
  cors_rule {
    allowed_headers = ["*"]
    allowed_methods = ["GET","PUT","DELETE"]
    allowed_origins = ["*"]
  }
}

Bucket Lifecycle（生命周期）

创建Bucket并设置Lifecycle。

resource "ksyun_ks3_bucket" "bucket-lifecycle" {
  provider = ks3.bj-prod
  bucket = "terraform-test-bucket-lifecycle"
  lifecycle_rule {
    id      = "id1"
    enabled = true
    filter {
      prefix = "logs"
    }
    expiration {
      days = 130
    }
    transition {
      days = 10
      storage_class = "STANDARD_IA"
    }
    transition {
      days = 40
      storage_class = "ARCHIVE"
    }
  }
  lifecycle_rule {
    id      = "id2"
    enabled = true
    filter {
      and {
        prefix = "test"
        tag {
          key   = "example_key1"
          value = "example_value"
        }
        tag {
          key   = "example_key2"
          value = "example_value"
        }
      }
    }
    expiration {
      date = "2024-07-10"
    }
    transition {
      date = "2024-05-10"
      storage_class = "STANDARD_IA"
    }
    transition {
      date = "2024-06-10"
      storage_class = "ARCHIVE"
    }
  }
}

查询Bucket列表

查询名称包含name_regex值的Bucket，并将匹配的Bucket配置信息输出到bucket_info.txt文件。

data "ksyun_ks3_buckets" "buckets-info" {
  provider = ks3.bj-prod
  name_regex = "bucket-name"
  output_file = "bucket_info.txt"
}