tools/custom-organization-policy-library/build/config/services/schema.cloudsql.yaml

#!  Copyright 2024 Google LLC
#!
#!  Licensed under the Apache License, Version 2.0 (the "License");
#!  you may not use this file except in compliance with the License.
#!  You may obtain a copy of the License at
#!
#!       http://www.apache.org/licenses/LICENSE-2.0
#!
#!  Unless required by applicable law or agreed to in writing, software
#!  distributed under the License is distributed on an "AS IS" BASIS,
#!  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#!  See the License for the specific language governing permissions and
#!  limitations under the License.

#@ load("@ytt:overlay", "overlay")
#@data/values-schema
---
#@overlay/match missing_ok=True
cloudsql:
  cloudsqlAllowedBackupLocations:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
    params:
      #@schema/validation min_len=1
      locations:
      - ""
  cloudsqlAllowedDiskTypes:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
    params:
      #@schema/validation min_len=1
      disk_types:
      - ""
  cloudsqlAllowedVersions:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
    params:
      #@schema/validation min_len=1
      versions:
      - ""
  cloudsqlDisableExternalIP:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlDisablePublicAuthorizedNetworks:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlEnforcePasswordComplexity:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
    params:
      #@schema/validation min=1
      min_length: 0
  cloudsqlRequireAutomatedBackup:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireHighAvailibility:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireMySQLDatabaseFlags:
      #@schema/validation one_of=["default", "skip", "include"]
      generation: "default"
      bundles:
        pci-dss: false
        cis: false
  cloudsqlRequirePointInTimeRecovery:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequirePostgreSQLDatabaseFlags:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireQueryInsights:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireRootPassword:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireSQLServerDatabaseFlags:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false
  cloudsqlRequireSSLConnection:
    #@schema/validation one_of=["default", "skip", "include"]
    generation: "default"
    bundles:
      pci-dss: false
      cis: false