fix: define velero s3 bucket ownership controls

catalystcommunity · Jun 28, 2024 · 7042294 · 7042294
1 parent 12f62b6
commit 7042294
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/velero.tf b/velero.tf
@@ -12,6 +12,14 @@ resource "aws_s3_bucket" "velero" {
   tags   = var.tags
 }
 
+resource "aws_s3_bucket_ownership_controls" "velero" {
+  count  = local.create_velero_bucket ? 1 : 0
+  bucket = aws_s3_bucket.velero[count.index].id
+  rule {
+      object_ownership = "ObjectWriter"
+  }
+}
+
 resource "aws_s3_bucket_acl" "velero" {
   count  = local.create_velero_bucket ? 1 : 0
   bucket = aws_s3_bucket.velero[count.index].id