Skip to main content

okustera_layer_permission (Resource)

Grants cross-tenant read or attach permissions for a shared CephFS layer to a designated target project ID in Okustera, facilitating secure cross-organization dependency sharing.

Example Usage​

resource "okustera_layer" "auth_sdk" {
  name        = "internal-auth-sdk"
  description = "Shared JWT verification middleware"
  visibility  = "shared"
}

resource "okustera_layer_permission" "grant_to_team_b" {
  layer_id           = okustera_layer.auth_sdk.id
  granted_project_id = "tenant-team-b"
  permission         = "read"
}

Schema​

Required​

  • granted_project_id (String, Forces new resource) Target tenant project ID granted access to the layer.
  • layer_id (Number, Forces new resource) Parent layer identifier.

Optional​

  • layer_version_id (Number, Forces new resource) Optional restriction limiting permission to a specific layer version ID.
  • permission (String, Forces new resource) Access level: read (allow attaching to functions) or admin. Defaults to read.

Read-Only​

  • created_at (String) Timestamp when permission was granted.
  • id (String) Unique composite permission identifier in format <layer_id>/<permission_id>.

Import​

Layer permissions can be imported using composite <layer_id>/<permission_id>:

terraform import okustera_layer_permission.example 10/201