google_logging_project_sinks resource
Syntax
A google_logging_project_sinks
is used to test a Google ProjectSink resource
Examples
describe google_logging_project_sinks(project: 'chef-gcp-inspec') do
its('names') { should include 'inspec-gcp-org-sink' }
end
Test that there are no more than a specified number of sinks available for the project
describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
its('count') { should be <= 100}
end
Test that an expected sink name is available for the project
describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
its('sink_names') { should include "my-sink" }
end
Test that an expected sink destination is available for the project
describe google_logging_project_sinks(project: 'chef-inspec-gcp') do
its('sink_destinations') { should include "storage.googleapis.com/a-logging-bucket" }
end
Test that a subset of all sinks matching “project*” have a particular writer identity
google_logging_project_sinks(project: 'chef-inspec-gcp').where(sink_name: /project/).sink_names.each do |sink_name|
describe google_logging_project_sink(project: 'chef-inspec-gcp', sink: sink_name) do
its('writer_identity') { should eq "serviceAccount:my-logging-service-account.iam.gserviceaccount.com" }
end
end
Properties
Properties that can be accessed from the google_logging_project_sinks
resource:
See the google_logging_project_sink resource for more information.
projects
- an array of
google_logging_project_sink
project names
- an array of
google_logging_project_sink
name filters
- an array of
google_logging_project_sink
filter destinations
- an array of
google_logging_project_sink
destination writer_identities
- an array of
google_logging_project_sink
writer_identity include_children
- an array of
google_logging_project_sink
include_children
Filter Criteria
This resource supports all of the above properties as filter criteria, which can be used
with where
as a block or a method.
GCP Permissions
Ensure the Stackdriver Logging API is enabled for the current project.