diff --git a/gcp/cloud-cloudbuild-trigger/main.tf b/gcp/cloud-cloudbuild-trigger/main.tf index c4da878..32f9a0a 100644 --- a/gcp/cloud-cloudbuild-trigger/main.tf +++ b/gcp/cloud-cloudbuild-trigger/main.tf @@ -36,6 +36,10 @@ resource "google_cloudbuild_trigger" "trigger_main" { included_files = var.include ignored_files = var.exclude disabled = var.disabled + + approval_config { + approval_required = var.approval_required + } } locals { diff --git a/gcp/cloud-cloudbuild-trigger/variables.tf b/gcp/cloud-cloudbuild-trigger/variables.tf index 99b9c94..af9bdd1 100644 --- a/gcp/cloud-cloudbuild-trigger/variables.tf +++ b/gcp/cloud-cloudbuild-trigger/variables.tf @@ -119,3 +119,9 @@ variable "repository" { default = null description = "Full resource ID of a google_cloudbuildv2_repository. If set, uses repository_event_config instead of github block." } + +variable "approval_required" { + type = bool + default = false + description = "If true, builds will require manual approval before executing." +} diff --git a/gcp/cloud-run-v2/main.tf b/gcp/cloud-run-v2/main.tf index 0624e58..4b6e28f 100644 --- a/gcp/cloud-run-v2/main.tf +++ b/gcp/cloud-run-v2/main.tf @@ -336,6 +336,7 @@ module "trigger_provision" { repository = var.repository trigger_service_account = var.trigger_service_account + approval_required = var.approval_required # Substitution variables for Cloud Build Trigger substitutions = merge({ diff --git a/gcp/cloud-run-v2/variables.tf b/gcp/cloud-run-v2/variables.tf index d0b1ec4..b010c22 100644 --- a/gcp/cloud-run-v2/variables.tf +++ b/gcp/cloud-run-v2/variables.tf @@ -395,3 +395,9 @@ variable "repository" { default = null description = "Full resource ID of a google_cloudbuildv2_repository. Passed through to the trigger module." } + +variable "approval_required" { + type = bool + default = false + description = "If true, Cloud Build trigger will require manual approval before executing." +}