Plumb through a deletion protection option. (#544)

Signed-off-by: Matt Moore <[email protected]>
octo-sts · Oct 1, 2024 · 6b3a4ba · 6b3a4ba
1 parent d731383
commit 6b3a4ba
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 0 deletions.
diff --git a/modules/app/main.tf b/modules/app/main.tf
@@ -77,6 +77,8 @@ module "this" {
   name       = var.name
   regions    = var.regions
 
+  deletion_protection = var.deletion_protection
+
   // Only accept traffic coming from GCLB.
   ingress = "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"
   // This needs to egress in order to talk to Github

diff --git a/modules/app/variables.tf b/modules/app/variables.tf
@@ -15,6 +15,12 @@ variable "regions" {
   }))
 }
 
+variable "deletion_protection" {
+  type        = bool
+  description = "Whether to enable delete protection for the service."
+  default     = true
+}
+
 variable "private-services" {
   description = "The names of the private services this module depends on."
   type = object({

diff --git a/modules/app/webhook.tf b/modules/app/webhook.tf
@@ -26,6 +26,8 @@ module "webhook" {
   name       = "${var.name}-webhook"
   regions    = var.regions
 
+  deletion_protection = var.deletion_protection
+
   // Only accept traffic coming from GCLB.
   ingress = "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"
   // This needs to egress in order to talk to Github