artifact_registry library

Artifact Registry: container / package repository, per-repository IAM.

Format is set at creation time and immutable. Pair format: DOCKER with ArtifactRegistryDockerConfig, format: MAVEN with ArtifactRegistryMavenConfig. Mode is STANDARD_REPOSITORY (default), VIRTUAL_REPOSITORY (aggregating proxy), or REMOTE_REPOSITORY (caching proxy).

Note: google_artifact_registry_vpcsc_config is beta-only; not curated in v0.8.0-dev. A follow-up PR extends the schema fixture against terraform-provider-google-beta and adds that resource.

Classes

ArtifactRegistryCleanupCondition

cleanup_policies.condition -- match versions by tag / age / prefix. At least one of the predicate fields should be set for the condition to be meaningful.

ArtifactRegistryCleanupMostRecentVersions

cleanup_policies.most_recent_versions -- retain the N most recent versions per matched package. Only valid paired with action == KEEP.

ArtifactRegistryCleanupPolicy

One cleanup_policies entry. Each policy pairs an action (KEEP / DELETE) with EXACTLY ONE of condition (tag/age/prefix match) or mostRecentVersions (retain top-N) -- mirrors the API-level exactly_one_of constraint between the two sub-blocks.

ArtifactRegistryDockerConfig

docker_config block. Applies only when the parent repository's format is DOCKER; ignored for other formats.

ArtifactRegistryMavenConfig

maven_config block. Applies only when the parent repository's format is MAVEN; ignored for other formats.

ArtifactRegistryRemoteCommonRepository

remote_repository_config.common_repository -- generic upstream by URI. Mutually exclusive with the format-specific *_repository blocks (see ArtifactRegistryRemoteRepositoryConfig.advancedExtra).

ArtifactRegistryRemoteRepositoryConfig

remote_repository_config block. Required when mode == REMOTE_REPOSITORY; mutually exclusive with ArtifactRegistryVirtualRepositoryConfig.

ArtifactRegistryRemoteUpstreamCredentials

remote_repository_config.upstream_credentials -- single helper for the only credential variant currently modeled by the schema (username_password_credentials).

ArtifactRegistryRemoteUsernamePasswordCredentials

remote_repository_config.upstream_credentials .username_password_credentials block.

ArtifactRegistryVirtualRepositoryConfig

virtual_repository_config block. Required when mode == VIRTUAL_REPOSITORY; mutually exclusive with ArtifactRegistryRemoteRepositoryConfig.

ArtifactRegistryVirtualUpstreamPolicy

One virtual_repository_config.upstream_policies entry.

ArtifactRegistryVulnerabilityScanningConfig

vulnerability_scanning_config block. Controls whether the Container Analysis API auto-scans artifacts pushed to this repo. Only enablementConfig is user-settable; enablementState and enablementStateReason are returned by the API and surface as read getters on the parent class.

GoogleArtifactRegistryRepository

Factory wrapper for google_artifact_registry_repository (provider hashicorp/google ~> 7.0).

GoogleArtifactRegistryRepositoryIamMember

Factory wrapper for google_artifact_registry_repository_iam_member.

Enums

ArtifactRegistryCleanupAction

cleanup_policies.action -- what the cleanup policy does to matching versions when its condition fires.

ArtifactRegistryCleanupTagState

cleanup_policies.condition.tag_state -- limits a cleanup condition to tagged / untagged / any versions. Schema default ANY.

ArtifactRegistryMavenVersionPolicy

maven_config.version_policy -- which Maven version classes the repository accepts. Schema default VERSION_POLICY_UNSPECIFIED.

ArtifactRegistryMode

mode for google_artifact_registry_repository. Picks the repository shape: standard (push/pull), virtual (federated view over other repositories), or remote (pull-through cache of an upstream registry). The schema defaults to STANDARD_REPOSITORY.

ArtifactRegistryVulnerabilityEnablementConfig

vulnerability_scanning_config.enablement_config -- whether vulnerability scanning is enabled for artifacts pushed to this repo. INHERITED defers to the project-level Artifact Analysis API state.