stevewritescode / terraform-provider-elastic-stack Goto Github PK

provider 'elasticstack' {
	cloud_id	string
	auth {
		basic {
			username	string
			password	string
		}
		apikey	string
	}
	endpoint {
		elasticsearch	string
		kibana			string
	}
}

resource 'elasticstack_fleet_agent_policy' '<name>' {
	description		string
	namespace		string
	agent_monitoring {
		collect_logs	boolean
		collect_metrics boolean
	}
}

resource 'elasticstack_fleet_enrollment_key' '<name>' {
	policy_id	string
}

resource elasticstack_fleet_integration_<type>' '<name>' {
	policy_id	string
	description	string
	namespace	string
}

resource 'elasticstack_fleet_integration_system` '<name>' {
	logs {
		auth {
			paths	[]string
		}
		syslog {
			paths	[]string
		}
		windows {
			application	boolean
			security	boolean
			system 		boolean
		}
	}
	metrics {
		cpu {
			period	string
			metrics []string
		}
		diskio {
			period			string
			include_devices []string
		}
		filesystem {
			period			string
			processors []{
				# variable key/value pair - This is the processors chain definition as in a regular Beat, so we should be able to represent this is a JSON then serialize it as YAML string.
			}
		}
		fsstat {
			period			string
			processors []{
				# see filesystem.processors above
			}
		}
		load {
			period	string		
		}
		memory {
			period	string		
		}
		network {
			period	string		
		}
		process {
			period	string
			include_top_n {
				by_cpu		integer
				by_memory	integer
			}
			cmdline_cache		boolean
			cgroup_reporting	boolean
			env_whitelist		string
			include_cpu_ticks	boolean
			processes		[]string
		}
		process_summary {
			period	string		
		}
		socket_summary {
			period	string		
		}
		uptime {
			period	string		
		}
	}
}

resource 'elasticstack_fleet_integration_elastic_endpoint_security' '<name>' {
	protections {
		malware {
			level		string
			notify_user boolean
			custom_user_notification_message	string
		}
		ransomware {
			level		string
			notify_user boolean
			custom_user_notification_message	string
		}
	}
	settings {
		register_as_windows_antivirus	boolean
		event_collection []{
			target_operating_systems   []string
			events 			 		   []string
		}
		extended []{
			key		string
			value 	string
		}
	}
}

resource 'elasticstack_auth_user' '<name>' {
	metadata {
		# variable key/value pair
	}
	email			string
	full_name 		string
	password 		string
	password_hash 	string
	roles 			[]string 
}

resource 'elasticstack_auth_role' '<name>' {
	metadata {
		# variable key/pair
	}
	cluster_privileges	[]string
	run_as_privileges	[]string
	index_privileges 	[]{
		indices		[]string
		privileges  []string
		field_privileges {
			granted_fields	[]string
			denied_fields	[]string
		}
		granted_documents_query {
			# variable key/value pair
		}
	}
	kibana_privileges 	[]{
		grant_all	{
			spaces		[]string
		}	
		grant_read	{
			spaces		[]string
		}	
		grant_custom	{
			spaces		[]string
			custom_feature_privileges []{
				features []enum
				grant	   enum
				sub_feature_privileges {
					short_url			 boolean
					store_search_session boolean
				}
			}
		}	
	}
}

resource 'elasticstack_auth_role_mapping' '<name>' {
	roles 	[]string
	rules	[]string {
		user_field	enum
		type		enum
		text_value	  string
		number_value  number
		boolean_value boolean
	}
}

resource 'elasticstack_auth_apikey' '<name>' {
	expiration	string
	role_descriptors {
		# key/value pair "role_name" -> "role_def" see definition of `Role`
	}
}

resource 'elasticstack_data_index_template' '<name>' {
	index_patterns	[]string
	priority		integer
	version			integer
	metadata {
		# variable key/value pair
	}
	composed_of		[]string
    data_stream {
		hidden	     boolean
	}
	template {
		settings {
			# variable key/value pair - Should we force the usage of flat settings?
		}
		aliases {
			# key/value pair "alias_name" -> "alias_def" see https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-aliases.html 
		}
		mappings {
			# see https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-put-mapping.html
		}
	}
}

resource 'elasticstack_data_component_template' '<name>' {
	# defines only "template" field from Index Template
}

resource 'elasticstack_data_index_lifecycle_policy' '<name>' {
	hot_phase {
        keep_data_forever boolean
		set_read_only	  boolean
		index_priority	integer
		force_merge {
			number_of_segments	integer
		}
		shrink {
			number_of_primary_shards	integer
		}
		rollover {
			max_index_size	string
			max_documents	integer
			max_age			string
		}
		searchable_snapshot {
			repository_name		string
		}
	}
	warm_phase {
		move_data_into_phase_when	string
        keep_data_forever boolean
		set_read_only	  boolean
		index_priority	  integer
		replicas {
			number_of_replicas	integer
        }
		force_merge {
			number_of_segments	integer
		}
		shrink {
			number_of_primary_shards	integer
		}
		data_allocation {
			custom {
				# variable key/value pair
			}
		}
	}
	cold_phase {
		move_data_into_phase_when	string
        keep_data_forever boolean
		set_read_only	  boolean
		index_priority	  integer
		freeze_index	  boolean
		replicas {
			number_of_replicas	integer
        }
		force_merge {
			number_of_segments	integer
		}
		data_allocation {
			custom {
				# variable key/value pair
			}
		}
		searchable_snapshot {
			repository_name		string
		}
	}
}

resource 'elasticstack_data_snapshot_repository' '<name>' {
	type	string
	settings {
		# variable key/value pair
	}
}