provider/google/storage: support for defaultObjectAccessControls

[renchap]

In the same way as google_storage_bucket_acl and google_storage_object_acl there should be a google_storage_default_object_acl to be able to specify the default ACL for new objects in a bucket. This is useful for example in a public bucket where you want all objects to be readable by anybody.

API documentation here : https://cloud.google.com/storage/docs/json_api/v1/defaultObjectAccessControls

Example:

resource "google_storage_default_object_acl" "public-read-acl" {
  bucket = "${google_storage_bucket.bucket.name}"
  role_entity = [
    "OWNER:project-owners-123456",
    "READER:allUsers"
  ]
}

[dasch]

This is necessary e.g. for using Google Container Registry from a different GCP project – the default object permissions need to be set.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.