Add exclusions option for logging sink resources

google/resource_logging_project_sink_test.go

@@ -117,6 +117,29 @@ func TestAccLoggingProjectSink_heredoc(t *testing.T) {
 	})
 }
 
+func TestAccLoggingProjectSink_loggingbucket(t *testing.T) {
+	t.Parallel()
+
+	sinkName := "tf-test-sink-" + randString(t, 10)
+	logBucketID := "tf-test-logbucket-" + randString(t, 10)
+
+	vcrTest(t, resource.TestCase{
+		PreCheck:     func() { testAccPreCheck(t) },
+		Providers:    testAccProviders,
+		CheckDestroy: testAccCheckLoggingProjectSinkDestroyProducer(t),
+		Steps: []resource.TestStep{
+			{
+				Config: testAccLoggingProjectSink_loggingbucket(sinkName, getTestProjectFromEnv(), logBucketID),
+			},
+			{
+				ResourceName:      "google_logging_project_sink.loggingbucket",
+				ImportState:       true,
+				ImportStateVerify: true,
+			},
+		},
+	})
+}
+
 func testAccCheckLoggingProjectSinkDestroyProducer(t *testing.T) func(s *terraform.State) error {
 	return func(s *terraform.State) error {
 		config := googleProviderConfig(t)
@@ -248,3 +271,32 @@ resource "google_bigquery_dataset" "logging_sink" {
 }
 `, sinkName, getTestProjectFromEnv(), getTestProjectFromEnv(), bqDatasetID)
 }
+
+func testAccLoggingProjectSink_loggingbucket(name, project, logBucketID string) string {
+	return fmt.Sprintf(`
+resource "google_logging_project_sink" "loggingbucket" {
+  name        = "%s"
+  project     = "%s"
+  destination = "logging.googleapis.com/projects/%s/locations/global/buckets/${google_logging_project_bucket_config.logbucket.id}"
+  exclusions {
+		name = "ex1"
+		description = "test"
+		filter = "resource.type = k8s_container"
+	}
+
+	exclusions {
+		name = "ex2"
+		description = "test-2"
+		filter = "resource.type = k8s_container"
+	}
+
+  unique_writer_identity = false
+}
+
+resource "google_logging_project_bucket_config" "logbucket" {
+    location  = "global"
+    retention_days = 30
+    bucket_id = "%s"
+}
+`, name, project, project, logBucketID)
+}

google/resource_logging_sink.go

@@ -2,6 +2,7 @@ package google
 
 import (
 	"fmt"
+	"strconv"
 	"strings"
 
 	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
@@ -30,6 +31,38 @@ func resourceLoggingSinkSchema() map[string]*schema.Schema {
 			Description:      `The filter to apply when exporting logs. Only log entries that match the filter are exported.`,
 		},
 
+		"exclusions": {
+			Type:        schema.TypeList,
+			Optional:    true,
+			Computed:    true,
+			Description: `Log entries that match any of the exclusion filters will not be exported. If a log entry is matched by both filter and one of exclusion_filters it will not be exported.`,
+			Elem: &schema.Resource{
+				Schema: map[string]*schema.Schema{
+					"name": {
+						Type:        schema.TypeString,
+						Required:    true,
+						Description: `A client-assigned identifier, such as "load-balancer-exclusion". Identifiers are limited to 100 characters and can include only letters, digits, underscores, hyphens, and periods. First character has to be alphanumeric.`,
+					},
+					"description": {
+						Type:        schema.TypeString,
+						Optional:    true,
+						Description: `A description of this exclusion.`,
+					},
+					"filter": {
+						Type:        schema.TypeString,
+						Required:    true,
+						Description: `An advanced logs filter that matches the log entries to be excluded. By using the sample function, you can exclude less than 100% of the matching log entries`,
+					},
+					"disabled": {
+						Type:        schema.TypeBool,
+						Optional:    true,
+						Default:     false,
+						Description: `If set to True, then this exclusion is disabled and it does not exclude any log entries`,
+					},
+				},
+			},
+		},
+
 		"writer_identity": {
 			Type:        schema.TypeString,
 			Computed:    true,
@@ -66,6 +99,7 @@ func expandResourceLoggingSink(d *schema.ResourceData, resourceType, resourceId
 		Name:            d.Get("name").(string),
 		Destination:     d.Get("destination").(string),
 		Filter:          d.Get("filter").(string),
+		Exclusions:      expandLoggingSinkExclusions(d.Get("exclusions")),
 		BigqueryOptions: expandLoggingSinkBigqueryOptions(d.Get("bigquery_options")),
 	}
 	return id, &sink
@@ -84,6 +118,9 @@ func flattenResourceLoggingSink(d *schema.ResourceData, sink *logging.LogSink) e
 	if err := d.Set("writer_identity", sink.WriterIdentity); err != nil {
 		return fmt.Errorf("Error setting writer_identity: %s", err)
 	}
+	if err := d.Set("exclusions", flattenLoggingSinkExclusion(sink.Exclusions)); err != nil {
+		return fmt.Errorf("Error setting exclusions: %s", err)
+	}
 	if err := d.Set("bigquery_options", flattenLoggingSinkBigqueryOptions(sink.BigqueryOptions)); err != nil {
 		return fmt.Errorf("Error setting bigquery_options: %s", err)
 	}
@@ -107,6 +144,10 @@ func expandResourceLoggingSinkForUpdate(d *schema.ResourceData) (sink *logging.L
 	if d.HasChange("filter") {
 		updateFields = append(updateFields, "filter")
 	}
+	if d.HasChange("exclusions") {
+		sink.Exclusions = expandLoggingSinkExclusions(d.Get("exclusions"))
+		updateFields = append(updateFields, "exclusions")
+	}
 	if d.HasChange("bigquery_options") {
 		sink.BigqueryOptions = expandLoggingSinkBigqueryOptions(d.Get("bigquery_options"))
 		updateFields = append(updateFields, "bigqueryOptions")
@@ -141,6 +182,47 @@ func flattenLoggingSinkBigqueryOptions(o *logging.BigQueryOptions) []map[string]
 	return []map[string]interface{}{oMap}
 }
 
+func expandLoggingSinkExclusions(v interface{}) []*logging.LogExclusion {
+	if v == nil {
+		return nil
+	}
+	exclusions := v.([]interface{})
+	if len(exclusions) == 0 {
+		return nil
+	}
+	results := make([]*logging.LogExclusion, 0, len(exclusions))
+	for _, e := range exclusions {
+		exclusion := e.(map[string]interface{})
+		disabled, _ := exclusion["disabled"].(bool)
+		results = append(results, &logging.LogExclusion{
+			Name:        exclusion["name"].(string),
+			Description: exclusion["description"].(string),
+			Filter:      exclusion["filter"].(string),
+			Disabled:    disabled,
+		})
+	}
+	return results
+}
+
+func flattenLoggingSinkExclusion(exclusions []*logging.LogExclusion) []map[string]interface{} {
+	if exclusions == nil {
+		return nil
+	}
+	flattenedExclusions := make([]map[string]interface{}, 0, len(exclusions))
+	for _, e := range exclusions {
+		flattenedExclusion := map[string]interface{}{
+			"name":        e.Name,
+			"description": e.Description,
+			"filter":      e.Filter,
+			"disabled":    strconv.FormatBool(e.Disabled),
+		}
+		flattenedExclusions = append(flattenedExclusions, flattenedExclusion)
+
+	}
+
+	return flattenedExclusions
+}
+
 func resourceLoggingSinkImportState(sinkType string) schema.StateFunc {
 	return func(d *schema.ResourceData, meta interface{}) ([]*schema.ResourceData, error) {
 		loggingSinkId, err := parseLoggingSinkId(d.Id())