Introduce variables for destroying things (#2398)

terraform/build.tf

@@ -21,7 +21,7 @@ resource "google_storage_bucket" "cloudbuild-cache" {
   name     = "${var.project}-cloudbuild-cache"
   location = var.storage_location
 
-  force_destroy               = true
+  force_destroy               = var.force_destroy
   uniform_bucket_level_access = true
 
   // Automatically expire cached objects.

terraform/database.tf

@@ -33,6 +33,8 @@ resource "google_sql_database_instance" "db-inst" {
   region           = var.region
   database_version = var.database_version
 
+  deletion_protection = !var.force_destroy
+
   settings {
     tier              = var.database_tier
     disk_size         = var.database_disk_size_gb
@@ -98,6 +100,8 @@ resource "google_sql_database_instance" "replicas" {
 
   master_instance_name = google_sql_database_instance.db-inst.name
 
+  deletion_protection = !var.force_destroy
+
   // These are REGIONAL replicas, which cannot auto-failover. The default
   // configuration has auto-failover in zones. This is for super disaster
   // recovery in which an entire region is down for an extended period of time.
@@ -344,7 +348,7 @@ resource "google_storage_bucket" "backups" {
   name     = "${var.project}-backups"
   location = var.storage_location
 
-  force_destroy               = true
+  force_destroy               = var.force_destroy
   uniform_bucket_level_access = true
 
   versioning {

terraform/variables.tf

@@ -12,6 +12,13 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+variable "force_destroy" {
+  type    = bool
+  default = false
+
+  description = "Allow resources like buckets and database instances to be destroyed."
+}
+
 variable "create_env_file" {
   type    = bool
   default = false