Adding restore script to GCBDR Samples

.github/CODEOWNERS

@@ -1,24 +1,28 @@
 # Overall sample owners
 
-*                       @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers
-/*                      @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers @terraform-google-modules/cloud-samples-infra
-/.github/               @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cloud-samples-infra
-/test/                  @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
-/build/                 @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+*                             @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers
+/*                            @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/terraform-samples-reviewers @terraform-google-modules/cloud-samples-infra
+/.github/                     @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cloud-samples-infra
+/test/                        @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
+/build/                       @terraform-google-modules/terraform-samples-git-admins @terraform-google-modules/cft-admins @terraform-google-modules/cloud-samples-infra
 
-/bigquery/              @terraform-google-modules/bigquery-terraform-swe @terraform-google-modules/terraform-samples-reviewers
-/cloud_sql/             @terraform-google-modules/infra-db-sdk @terraform-google-modules/terraform-samples-reviewers
-/cloudvpn/              @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/composer/              @terraform-google-modules/cloud-dpes-composer @terraform-google-modules/terraform-samples-reviewers
-/compute/               @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/dns/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/gke/                   @terraform-google-modules/eks-team @terraform-google-modules/terraform-samples-reviewers
-/lb/                    @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/looker/		@terraform-google-modules/cloud-looker-docs @terraform-google-modules/terraform-samples-reviewers
-/media_cdn/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/network_connectivity/  @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/privateca/             @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/storage/               @terraform-google-modules/cloud-storage-dpe @terraform-google-modules/terraform-samples-reviewers
-/traffic_director/      @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/vpc/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
-/managedkafka/          @terraform-google-modules/managedkafka-dev-team @terraform-google-modules/terraform-samples-reviewers
+/bigquery/                    @terraform-google-modules/bigquery-terraform-swe @terraform-google-modules/terraform-samples-reviewers
+/cloud_sql/                   @terraform-google-modules/cloudsql-connectivity @terraform-google-modules/terraform-samples-reviewers
+/cloudvpn/                    @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/composer/                    @terraform-google-modules/cloud-dpes-composer @terraform-google-modules/terraform-samples-reviewers
+/compute/                     @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/dns/                         @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/gke/                         @terraform-google-modules/eks-team @terraform-google-modules/terraform-samples-reviewers
+/lb/                          @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/looker/                      @terraform-google-modules/cloud-looker-docs @terraform-google-modules/terraform-samples-reviewers
+/media_cdn/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/network_connectivity/        @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/network_security/intercept/  @terraform-google-modules/pm2-team @terraform-google-modules/terraform-samples-reviewers
+/network_security/mirroring/  @terraform-google-modules/pm2-team @terraform-google-modules/terraform-samples-reviewers
+/privateca/                   @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/securitycenter/          @terraform-google-modules/gcp-security-command-center @terraform-google-modules/terraform-samples-reviewers
+/storage/                     @terraform-google-modules/cloud-storage-dpe @terraform-google-modules/terraform-samples-reviewers
+/traffic_director/            @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/vpc/                         @terraform-google-modules/dee-infra @terraform-google-modules/terraform-samples-reviewers
+/managedkafka/                @terraform-google-modules/managedkafka-dev-team @terraform-google-modules/terraform-samples-reviewers
+/backupdr/                    @terraform-google-modules/gcbdr-samples-team @terraform-google-modules/terraform-samples-reviewers

Makefile

@@ -18,7 +18,7 @@
 # Make will use bash instead of sh
 SHELL := /usr/bin/env bash
 
-DOCKER_TAG_VERSION_DEVELOPER_TOOLS := 1.22
+DOCKER_TAG_VERSION_DEVELOPER_TOOLS := 1.25
 DOCKER_IMAGE_DEVELOPER_TOOLS := cft/developer-tools
 REGISTRY_URL := gcr.io/cloud-foundation-cicd
 DOCKER_BIN ?= docker

README.md

@@ -22,7 +22,7 @@ authenticates Terraform, letting you get started with less setup.
 
 1. Clone this repository:
 
-   git clone https://github.com/GoogleCloudPlatform/terraform-docs-samples.git
+    `git clone https://github.com/terraform-google-modules/terraform-docs-samples`
 
 ## How to run a sample
 

application_integration/provision_region/main.tf

@@ -48,9 +48,9 @@ resource "google_integrations_client" "example" {
   run_as_service_account     = google_service_account.default.email
   cloud_kms_config {
     kms_location   = "us-east1"
-    kms_ring       = google_kms_key_ring.default.id
-    key            = google_kms_crypto_key.default.id
-    key_version    = google_kms_crypto_key_version.default.id
+    kms_ring       = basename(google_kms_key_ring.default.id)
+    key            = basename(google_kms_crypto_key.default.id)
+    key_version    = basename(google_kms_crypto_key_version.default.id)
     kms_project_id = data.google_project.default.project_id
   }
 }

backupdr/backup_plan/main.tf

@@ -0,0 +1,98 @@
+/**
+* Copyright 2024 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+# [START backupdr_create_backupvault]
+
+resource "google_backup_dr_backup_vault" "default" {
+  provider                                   = google-beta
+  location                                   = "us-central1"
+  backup_vault_id                            = "my-vault"
+  description                                = "This is a second backup vault built by Terraform."
+  backup_minimum_enforced_retention_duration = "100000s"
+
+  labels = {
+    foo = "bar1"
+    bar = "baz1"
+  }
+
+  annotations = {
+    annotations1 = "bar1"
+    annotations2 = "baz1"
+  }
+
+  force_update                = "true"
+  ignore_inactive_datasources = "true"
+  allow_missing               = "true"
+}
+
+# [END backupdr_create_backupvault]
+
+# [START backupdr_create_backupplan]
+
+# Before creating a backup plan, you need to create backup vault (google_backup_dr_backup_vault).
+resource "google_backup_dr_backup_plan" "default" {
+  provider       = google-beta
+  location       = "us-central1"
+  backup_plan_id = "my-bp"
+  resource_type  = "compute.googleapis.com/Instance"
+  backup_vault   = google_backup_dr_backup_vault.default.name
+
+  backup_rules {
+    rule_id               = "rule-1"
+    backup_retention_days = 5
+
+    standard_schedule {
+      recurrence_type  = "HOURLY"
+      hourly_frequency = 6
+      time_zone        = "UTC"
+
+      backup_window {
+        start_hour_of_day = 0
+        end_hour_of_day   = 24
+      }
+    }
+  }
+}
+
+# [END backupdr_create_backupplan]
+
+# [START backupdr_create_backupplan_disk]
+
+# Before creating a backup plan, you need to create backup vault (google_backup_dr_backup_vault).
+resource "google_backup_dr_backup_plan" "disk_default" {
+  provider       = google-beta
+  location       = "us-central1"
+  backup_plan_id = "my-disk-bp"
+  resource_type  = "compute.googleapis.com/Disk"
+  backup_vault   = google_backup_dr_backup_vault.default.name
+
+  backup_rules {
+    rule_id               = "rule-1"
+    backup_retention_days = 5
+
+    standard_schedule {
+      recurrence_type  = "HOURLY"
+      hourly_frequency = 1
+      time_zone        = "UTC"
+
+      backup_window {
+        start_hour_of_day = 0
+        end_hour_of_day   = 6
+      }
+    }
+  }
+}
+
+# [END backupdr_create_backupplan_disk]

backupdr/backup_plan_association/main.tf

@@ -0,0 +1,160 @@
+/**
+* Copyright 2024 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+resource "google_service_account" "default" {
+  account_id   = "my-serviceaccount"
+  display_name = "Custom SA for VM Instance"
+}
+
+resource "google_compute_instance" "default" {
+  name         = "my-instance"
+  machine_type = "n2-standard-2"
+  zone         = "us-central1-a"
+  tags         = ["foo", "bar"]
+
+  boot_disk {
+    initialize_params {
+      image = "debian-cloud/debian-11"
+      labels = {
+        my_label = "value"
+      }
+    }
+  }
+
+  // Local SSD disk
+  scratch_disk {
+    interface = "NVME"
+  }
+
+  network_interface {
+    network = "default"
+    access_config {
+      // Ephemeral public IP
+    }
+  }
+
+  service_account {
+    # Google recommends custom service accounts that have cloud-platform scope and permissions granted via IAM Roles.
+    email  = google_service_account.default.email
+    scopes = ["cloud-platform"]
+  }
+}
+
+resource "google_compute_disk" "default" {
+  name = "disk-data"
+  type = "pd-standard"
+  zone = "us-central1-a"
+}
+
+resource "google_backup_dr_backup_vault" "default" {
+  provider                                   = google-beta
+  location                                   = "us-central1"
+  backup_vault_id                            = "my-vault"
+  description                                = "This is a second backup vault built by Terraform."
+  backup_minimum_enforced_retention_duration = "100000s"
+
+  labels = {
+    foo = "bar1"
+    bar = "baz1"
+  }
+
+  annotations = {
+    annotations1 = "bar1"
+    annotations2 = "baz1"
+  }
+
+  force_update                = "true"
+  ignore_inactive_datasources = "true"
+  allow_missing               = "true"
+}
+
+resource "google_backup_dr_backup_plan" "default" {
+  provider       = google-beta
+  location       = "us-central1"
+  backup_plan_id = "my-bp"
+  resource_type  = "compute.googleapis.com/Instance"
+  backup_vault   = google_backup_dr_backup_vault.default.name
+
+  backup_rules {
+    rule_id               = "rule-1"
+    backup_retention_days = 2
+
+    standard_schedule {
+      recurrence_type  = "HOURLY"
+      hourly_frequency = 6
+      time_zone        = "UTC"
+
+      backup_window {
+        start_hour_of_day = 12
+        end_hour_of_day   = 18
+      }
+    }
+  }
+}
+
+resource "google_backup_dr_backup_plan" "disk_default" {
+  provider       = google-beta
+  location       = "us-central1"
+  backup_plan_id = "my-disk-bp"
+  resource_type  = "compute.googleapis.com/Disk"
+  backup_vault   = google_backup_dr_backup_vault.default.name
+
+  backup_rules {
+    rule_id               = "rule-1"
+    backup_retention_days = 5
+
+    standard_schedule {
+      recurrence_type  = "HOURLY"
+      hourly_frequency = 1
+      time_zone        = "UTC"
+
+      backup_window {
+        start_hour_of_day = 0
+        end_hour_of_day   = 6
+      }
+    }
+  }
+}
+
+# [START backupdr_create_backupplanassociation]
+
+# Before creating a backup plan association, you need to create backup plan (google_backup_dr_backup_plan)
+# and compute instance (google_compute_instance).
+resource "google_backup_dr_backup_plan_association" "default" {
+  provider                   = google-beta
+  location                   = "us-central1"
+  backup_plan_association_id = "my-bpa"
+  resource                   = google_compute_instance.default.id
+  resource_type              = "compute.googleapis.com/Instance"
+  backup_plan                = google_backup_dr_backup_plan.default.name
+}
+
+# [END backupdr_create_backupplanassociation]
+
+# [START backupdr_create_backupplanassociation_disk]
+
+# Before creating a backup plan association, you need to create backup plan (google_backup_dr_backup_plan)
+# and compute disk (google_compute_disk or google_compute_region_disk).
+resource "google_backup_dr_backup_plan_association" "disk_association" {
+  provider                   = google-beta
+  location                   = "us-central1"
+  backup_plan_association_id = "my-disk-bpa"
+  resource                   = google_compute_disk.default.id
+  resource_type              = "compute.googleapis.com/Disk"
+  backup_plan                = google_backup_dr_backup_plan.disk_default.name
+}
+
+# [END backupdr_create_backupplanassociation_disk]

backupdr/backup_vault/main.tf

@@ -0,0 +1,30 @@
+/**
+* Copyright 2024 Google LLC
+*
+* Licensed under the Apache License, Version 2.0 (the "License");
+* you may not use this file except in compliance with the License.
+* You may obtain a copy of the License at
+*
+*      http://www.apache.org/licenses/LICENSE-2.0
+*
+* Unless required by applicable law or agreed to in writing, software
+* distributed under the License is distributed on an "AS IS" BASIS,
+* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+* See the License for the specific language governing permissions and
+* limitations under the License.
+*/
+
+# [START backupdr_create_backupvault]
+
+resource "google_backup_dr_backup_vault" "default" {
+  provider                                   = google-beta
+  location                                   = "us-central1"
+  backup_vault_id                            = "my-vault"
+  description                                = "This vault is created usingTerraform."
+  backup_minimum_enforced_retention_duration = "100000s"
+  force_update                               = "true"
+  ignore_inactive_datasources                = "true"
+  allow_missing                              = "true"
+}
+
+# [END backupdr_create_backupvault]