The CloudQuery Terraform plugin extracts terraform state and loads it into any supported CloudQuery destination
Publisher
cloudquery
Latest version
v5.1.2
Type
Source
Platforms
Date Published
Loading plugin documentation
CloudQuery's use of cookies
We use tracking cookies to understand how you use the product and help us improve it. Your consent is required before we can enable these cookies. You can opt out via the link in the footer.
kind: source
spec:
# Source spec section
name: terraform
path: cloudquery/terraform
registry: cloudquery
version: "v5.1.2"
tables: ["*"]
destinations: ["postgresql"]
# Learn more about the configuration options at https://cql.ink/terraform_source
spec:
backends:
- name: local
type: local
config:
prefix: /tmp/cloudquery
- name: s3
type: s3
config:
bucket: <bucket>
prefix: <prefix>
region: <region>
role_arn: <role_arn>
- name: gcs
type: gcs
config:
bucket: <bucket>
prefix: <prefix>
service_account_key_json: <service_account_key_json>
service_account_impersonation:
target_principal: <target_principal>
delegates: [<delegate1>, <delegate2>]
scopes: ["https://www.googleapis.com/auth/cloud-platform.read-only"]
subject: <subject>
local, s3 and gcs backends.AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKENaws configure).credentials file under .aws folder that is placed in the home folder on your computerconfig file under .aws folder that is placed in the home folder on your computergcloud auth application-default login, recommended when running locally)service_account_key_json configuration field)backends ([]Backend specs) (optional)concurrency (integer) (optional) (default: 10000)name (string) (optional)type (BackendType, "local" or "s3") (required)config (Backend config) (required)prefix (string) (required).tfstate files.bucket (string) (required)prefix (string) (optional).tfstate objects in the specified bucket. If not specified, all objects in the bucket will be searched.region (string) (optional)GetBucketRegion will be called to determine the region.role_arn (string) (optional)bucket (string) (required)prefix (string) (optional).tfstate objects in the specified bucket. If not specified, all objects in the bucket will be searched (the same as specifying an empty value).service_account_key_json (string) (optional)service_account_impersonation (Service Account Impersonation spec, optional. Default: empty)target_principal (string) (required)scopes ([]string) (default: ["https://www.googleapis.com/auth/cloud-platform.read-only"])delegates ([]string) (default: empty)roles/iam.serviceAccountTokenCreator on the next service account in the chain.subject (string) (default: empty)sub).
This field should only be set if you wish to impersonate a user.
This feature is useful when using domain wide delegation.kind: source
spec:
name: terraform
path: cloudquery/terraform
registry: cloudquery
version: "v5.1.2-fips"
...