Dell Technologies – Resources

V1.1.0: objectscale_bucket resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_bucket (Resource)

This resource provisions and manages S3 buckets on Dell ObjectScale.

Warning: Deleting a bucket using this resource will also delete all data contained within the bucket. Ensure you have backed up any important data before performing a destroy operation.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a bucket with the name set in `name` attribute on the ObjectScale

resource "objectscale_bucket" "example_bucket" {
  # Required: Owner of the bucket
  owner = "admin1"

  # Required: Name of the bucket
  name = "example-bucket-2"

  # Required: Virtual pool URL associated with the bucket (Get it using Replication Datasource)
  replication_group = "urn:storageos:ReplicationGroupInfo:1cb09936-67a2-4692-abd2-eb1277ef7364:global"

  # Required: Namespace for bucket isolation
  namespace = "ns1"

  # Optional: Size of each block in bytes
  block_size = 7000

  # Optional: Size threshold for notifications
  notification_size = 2024

  # Optional: Enable filesystem interface
  # filesystem_enabled = true

  # Optional: Key-value tags for bucket
  tag = [
    {
      key   = "Env"
      value = "Production"
    }
  ]

  # Optional: Enable server-side encryption
  # is_encryption_enabled = true

  # Optional: Default group permissions
  default_group_file_read_permission = "true"
  # default_group_file_write_permission   = "false"
  # default_group_file_execute_permission = "false"
  # default_group_dir_read_permission     = "true"
  # default_group_dir_write_permission    = "false"
  # default_group_dir_execute_permission  = "true"

  # Optional: Default group name
  # default_group = "default"

  # Optional: Auto-commit period in seconds
  auto_commit_period = 28

  # Optional: Retention period in days
  retention = 30

  # Optional: Allow stale reads
  # is_stale_allowed = true

  # Optional: Allow object lock with ADO
  is_object_lock_with_ado_allowed = true

  # Optional: Enable TSO read-only mode
  # is_tso_read_only = true

  # Optional: Enable metadata search
  is_metadata_enabled = true

  # Optional: Metadata search configuration
  search_metadata = [
    {
      type     = "System"
      name     = "CreateTime"
      datatype = "datetime"
    },
    {
      type     = "User"
      name     = "x-amz-meta-abc"
      datatype = "string"
    }
  ]

  # Optional: Retention governance settings
  min_max_governor = {
    enforce_retention          = true
    minimum_fixed_retention    = 10
    maximum_fixed_retention    = 365
    minimum_variable_retention = 5
    maximum_variable_retention = 180
  }

  # Optional: Days after which audited delete expires
  audit_delete_expiration = 90

  # Optional: Enable object lock
  # is_object_lock_enabled = true

  # Optional: Enable advanced metadata search
  # enable_advanced_metadata_search = true

  # Optional: Advanced metadata search target name
  # advanced_metadata_search_target_name = "search-target"

  # Optional: Advanced metadata search target stream
  # advanced_metadata_search_target_stream = "stream-1"

  # Optional: Enable local metadata reads
  # local_object_metadata_reads = true

  # Optional: Versioning status (Enabled/Suspended)
  versioning_status = "Enabled"

  # bucket_policy = ""

  # Optional: Bucket policy in JSON format
  bucket_policy = jsonencode({
    Version = "2012-10-17",
    Id      = "null",
    Statement = [
      {
        Sid       = "AllowPublicRead",
        Effect    = "Allow",
        Principal = "*",
        Action    = "s3:GetObject",
        Resource  = "arn:aws:s3:::example-bucket-2/*"
      }
    ]
  })

  # Optional: User ACLs
  user_acl = [
    {
      name       = "admin1"
      permission = ["full_control"]
    },
    {
      name       = "root"
      permission = ["read", "write"]
    }
  ]

  # Optional: User ACLs
  group_acl = [
    {
      name       = "all_users"
      permission = ["full_control"]
    }
  ]
}
# After the execution of above resource block, bucket would have been created on the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

name (String) Name of the bucket.
namespace (String) Namespace for bucket isolation.
owner (String) Owner of the bucket.
replication_group (String) Replication group associated with the bucket.

Optional

advanced_metadata_search_target_name (String) Advanced metadata search target name.
advanced_metadata_search_target_stream (String) Advanced metadata search target stream.
audit_delete_expiration (Number) Days after which audited delete expires. - If not set, or set to -1 or -2, reflections are retained infinitely. - If set to 0, reflections are deleted immediately and not retained. - Any other positive value specifies the number of days to retain reflections before deletion.
auto_commit_period (Number) Auto-commit period in seconds.
block_size (Number) Size of each block in bytes.
bucket_policy (String) Bucket policy in JSON format.
custom_group_acl (Attributes Set) List of custom group ACLs for the bucket. (see below for nested schema)
default_group (String) Default group name.
default_group_dir_execute_permission (Boolean) Default group directory execute permission.
default_group_dir_read_permission (Boolean) Default group directory read permission.
default_group_dir_write_permission (Boolean) Default group directory write permission.
default_group_file_execute_permission (Boolean) Default group file execute permission.
default_group_file_read_permission (Boolean) Default group file read permission.
default_group_file_write_permission (Boolean) Default group file write permission.
default_object_lock_retention_days (Number) Default object lock retention days.
default_object_lock_retention_mode (String) Default object lock retention mode.
default_object_lock_retention_years (Number) Default object lock retention years.
default_retention (Number) Default retention period in seconds.
enable_advanced_metadata_search (Boolean) Enable advanced metadata search.
filesystem_enabled (Boolean) Enable filesystem access.
group_acl (Attributes Set) List of group ACLs for the bucket. (see below for nested schema)
is_encryption_enabled (Boolean) Enable server-side encryption.
is_metadata_enabled (Boolean) Is search metadata enabled.
is_object_lock_enabled (Boolean) Enable object lock.
is_object_lock_with_ado_allowed (Boolean) Allow object lock with ADO.
is_stale_allowed (Boolean) Allow stale reads.
is_tso_read_only (Boolean) Enable TSO read-only mode.

local_object_metadata_reads (Boolean) Enable or disable local object metadata reads for OBS CAS ADO RW buckets.

  		- When enabled, the bucket will attempt to read object metadata from locally replicated data, improving availability and reducing latency if the remote VDC is far away or unavailable.
  		- This may result in stale object metadata being returned if the metadata is not fully replicated to the local VDC. For example, deletion status, Litigation Hold, or Event Based Retention information may be outdated.
  		- If the object metadata is not available locally, it will be requested from the remote VDC.

min_max_governor (Attributes) Retention governance settings. (see below for nested schema)
notification_size (Number) Size threshold for notifications.
retention (Number) Retention period in days.
search_metadata (Attributes Set) List of metadata definitions. (see below for nested schema)
tag (Attributes Set) Key-value tags for the bucket. (see below for nested schema)
user_acl (Attributes Set) List of user ACLs for the bucket. (see below for nested schema)
versioning_status (String) Versioning status (Enabled/Suspended).

Read-Only

api_type (String) API type for the bucket.
block_size_in_count (Number) Block size in count.
created (String) Creation date of the bucket resource.
id (String) Unique identifier for the bucket resource.
is_empty_bucket_in_progress (Boolean) Indicates if empty bucket operation is in progress.
locked (Boolean) Indicates if the bucket is locked.
max_keys (Number) Maximum number of keys for search.
md_tokens (Boolean) Metadata tokens for advanced search.
notification_size_in_count (Number) Notification size in count.
soft_quota (String) Soft quota for the bucket.

Nested Schema for `custom_group_acl`

Required:

name (String) Custom group for the ACL entry.
permission (Set of String) List of permissions for the custom group. Valid values: full_control, read, delete, write, write_acl, read_acl, execute, privileged_write, none.

Nested Schema for `group_acl`

Required:

name (String) Group for the ACL entry.
permission (Set of String) List of permissions for the custom group. Valid values: full_control, read, delete, write, write_acl, read_acl, execute, privileged_write, none.

Nested Schema for `min_max_governor`

Optional:

enforce_retention (Boolean) Enforce retention.
maximum_fixed_retention (Number) Maximum fixed retention.
maximum_variable_retention (Number) Maximum variable retention.
minimum_fixed_retention (Number) Minimum fixed retention.
minimum_variable_retention (Number) Minimum variable retention.

Nested Schema for `search_metadata`

Optional:

datatype (String) Metadata datatype.
name (String) Metadata name.
type (String) Metadata type.

Nested Schema for `tag`

Required:

key (String) Tag key.
value (String) Tag value.

Nested Schema for `user_acl`

Required:

name (String) User for the ACL entry.
permission (Set of String) List of permissions for the custom group. Valid values: full_control, read, delete, write, write_acl, read_acl, execute, privileged_write, none.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_bucket.bucket <bucket_name:namespace>
# Example:
terraform import objectscale_bucket.bucket example_bucket:name_space_1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_group resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_group (Resource)

This resource manages an Dell ObjectScale IAM group.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
resource "objectscale_iam_group" "example" {
  name      = "example-group"
  namespace = "ns1"
}

Schema

Required

name (String) Simple name identifying the group. Required
namespace (String) Namespace under which group exists. Required

Read-Only

arn (String) Arn that identifies the Group. Computed
create_date (String) ISO 8601 format DateTime when group was created.
id (String) Unique Id associated with the Group.
path (String) The path to the IAM Group. Defaults to / and only / is allowed

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_group.example <group_name:namespace>
# Example:
terraform import objectscale_iam_group.iam_group example_group:ns1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_group_membership resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_group_membership (Resource)

This resource manages IAM group membership in Dell ObjectScale, letting user declaratively add or remove IAM users from specified groups.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
resource "objectscale_iam_group" "example" {
  name      = "example-group"
  namespace = "ns1"
}

resource "objectscale_iam_group_membership" "example_membership" {
  name      = objectscale_iam_group.example.name
  namespace = objectscale_iam_group.example.namespace
  user      = "test-user"
}

Schema

Required

name (String) Simple name identifying the group. Required
namespace (String) Namespace under which group exists. Required
user (String) User to be added to the group. Required

Unless specified otherwise, all fields of this resource can be updated.

V1.1.0: objectscale_iam_inline_policy resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_inline_policy (Resource)

This resource manages IAM inline policies for Dell ObjectScale entities (user, group, or role).

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# Before running `terraform apply`, ensure that the specified user/group/role exists in the ObjectScale
# Running `terraform apply` will set the specified inline policies for that user/group/role in the ObjectScale
resource "objectscale_iam_inline_policy" "example" {
  # Namespace to which the IAM entity belongs must be provided
  namespace = "ns1"

  # Exactly one of username, groupname, or rolename must be provided
  username = "userTest1"
  # groupname = "groupTest1"
  # rolename  = "roleTest1"

  # List of inline policies to be set on the specified IAM entity must be provided
  # Ensure that you provide a valid JSON for the policy documents
  policies = [
    {
      name = "inlinePolicyTest1"
      document = jsonencode({
        Version = "2012-10-17",
        Statement = [
          {
            Sid    = "VisualEditor0",
            Effect = "Allow",
            Action = [
              "iam:GetPolicyVersion",
              "iam:GetUser",
              "iam:GetPolicy",
              "iam:GetGroupPolicy",
              "iam:GetRole",
              "iam:GetAccessKeyLastUsed",
              "iam:GetGroup",
              "iam:GetUserPolicy",
              "iam:GetSAMLProvider",
              "iam:GetRolePolicy",
              "iam:GetContextKeysForCustomPolicy",
              "iam:GetContextKeysForPrincipalPolicy",
              "iam:SimulateCustomPolicy",
              "iam:SimulatePrincipalPolicy"
            ],
            Resource = "*"
          }
        ]
      })
    },
    {
      name = "inlinePolicyTest2"
      document = jsonencode({
        Version = "2012-10-17",
        Statement = [
          {
            Sid    = "VisualEditor0",
            Effect = "Allow",
            Action = [
              "iam:DeleteAccessKey",
              "iam:UpdateSAMLProvider",
              "iam:CreateRole",
              "iam:RemoveUserFromGroup",
              "iam:AddUserToGroup",
              "iam:UpdateUser",
              "iam:CreateAccessKey",
              "iam:UpdateAccessKey",
              "iam:CreateSAMLProvider",
              "iam:DeleteRole",
              "iam:UpdateRole",
              "iam:DeleteGroup",
              "iam:UpdateGroup",
              "iam:CreateUser",
              "iam:CreateGroup",
              "iam:DeleteSAMLProvider",
              "iam:DeleteUser"
            ],
            Resource = "*"
          }
        ]
      })
    }
  ]
}

Schema

Required

namespace (String) Namespace to which the IAM entity belongs.
policies (Attributes List) List of IAM inline policies to associate with the entity. (see below for nested schema)

Optional

groupname (String) Name of the group. Exactly one of username, groupname, or rolename must be set.
rolename (String) Name of the role. Exactly one of username, groupname, or rolename must be set.
username (String) Name of the user. Exactly one of username, groupname, or rolename must be set.

Read-Only

id (String) Unique identifier for the IAM inline policy resource.

Nested Schema for `policies`

Required:

document (String) Policy document in JSON format.
name (String) Name of the IAM inline policy.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_inline_policy.example <namespace>:<entity_type>:<entity_name>
# <namespace>: Namespace to which the IAM entity belongs.
# <entity_type>: One of user, group, or role.
# <entity_name>: The name of the user, group, or role.
# Examples:
# Import inline policies for a user
# terraform import objectscale_iam_inline_policy.example ns1:user:userTest1
# Import inline policies for a group
# terraform import objectscale_iam_inline_policy.example ns1:group:groupTest1
# Import inline policies for a role
# terraform import objectscale_iam_inline_policy.example ns1:role:roleTest1

# after running this command, populate the policies field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_policy resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_policy (Resource)

This resource manages an Dell ObjectScale IAM policy.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
resource "objectscale_iam_policy" "testacc_policy" {
  name        = "testacc_policy"
  namespace   = "ns1"
  description = "An example policy"
  policy_document = jsonencode({

    "Version" : "2012-10-17",

    "Statement" : [

      {

        "Action" : [

          "s3:ListBucket",

          "iam:GetUserPolicy"

        ],

        "Resource" : "*",

        "Effect" : "Allow",

        "Sid" : "VisualEditor0"

      }

    ]

  })
}

Schema

Required

name (String) The name of the IAM Policy.
namespace (String) The namespace in which to create the IAM Policy.
policy_document (String) The Policy Document defining the IAM Policy versions in JSON format.

Optional

description (String) The description of the IAM Policy.

Read-Only

arn (String) The Amazon Resource Name (ARN) of the IAM Policy.
create_date (String) The creation date of the IAM Policy.
version_id (String) The ID of the default policy document version.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import oobjectscale_iam_policy.testacc_policy <policy_arn#namespace>
# Example:
terraform import objectscale_iam_policy.testacc_policy urn:ecs:iam::ns1:policy/testacc_policy#ns1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_policy_attachment resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_policy_attachment (Resource)

This resource attaches an IAM policy to a target principal (user, group, or role) in Dell ObjectScale.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# Before running `terraform apply`, ensure that the specified user/group/role exists in the ObjectScale
# Running `terraform apply` will set the specified policy arns for that user/group/role in the ObjectScale
resource "objectscale_iam_policy_attachment" "example" {
  # Namespace to which the IAM entity belongs must be provided
  namespace = "ns1"

  # Exactly one of username, groupname, or rolename must be provided
  username = "userTest1"
  # groupname = "groupTest1"
  # rolename  = "roleTest1"

  # List of policy arns to be set on the specified IAM entity must be provided
  policy_arns = [
    "urn:ecs:iam:::policy/ECSS3ReadOnlyAccess",
    "urn:ecs:iam:::policy/IAMReadOnlyAccess"
  ]
}

Schema

Required

namespace (String) Namespace to which the IAM entity belongs.
policy_arns (Set of String) List of policy arns to associate with the entity.

Optional

groupname (String) Name of the group. Exactly one of username, groupname, or rolename must be set.
rolename (String) Name of the role. Exactly one of username, groupname, or rolename must be set.
username (String) Name of the user. Exactly one of username, groupname, or rolename must be set.

Read-Only

id (String) Unique identifier for the IAM policy attachment resource.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_policy_attachment.example <namespace>:<entity_type>:<entity_name>
# <namespace>: Namespace to which the IAM entity belongs.
# <entity_type>: One of user, group, or role.
# <entity_name>: The name of the user, group, or role.
# Examples:
# Import policy attachments for a user
# terraform import objectscale_iam_policy_attachment.example ns1:user:userTest1
# Import policy attachments for a group
# terraform import objectscale_iam_policy_attachment.example ns1:group:groupTest1
# Import policy attachments for a role
# terraform import objectscale_iam_policy_attachment.example ns1:role:roleTest1

# after running this command, populate the policy_arns field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_role resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_role (Resource)

This resource manages an Dell ObjectScale IAM role.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
resource "objectscale_iam_role" "example" {
  name                     = "example-role"
  namespace                = "ns1"
  description              = "An example role updated"
  permissions_boundary_arn = "urn:ecs:iam:::policy/ECSS3Access"
  max_session_duration     = 4000
  assume_role_policy_document = jsonencode({
    Version = "2012-11-17"
    Statement = [
      {
        Effect = "Allow"
        Principal = {
          AWS = [
            "urn:ecs:iam::ns1:user/sample_user_1"
          ]
        }
        Action = "sts:AssumeRole"
      }
    ]
  })
  tags = [
    {
      "key" : "key1",
      "value" : "value1"
    },
    {
      "key" : "key2",
      "value" : "value2"
    }
  ]
}

Schema

Required

assume_role_policy_document (String) The trust relationship policy document that grants an entity permission to assume the role.
name (String) Simple name identifying the Role. Required
namespace (String) Namespace under which Role exists. Required

Optional

description (String) The description of the role.
max_session_duration (Number) The maximum session duration (in seconds) that you want to set for the specified role. If you do not specify a value for this setting, the default maximum of one hour is applied. This setting can have a value from 1 hour to 12 hours.
permissions_boundary_arn (String) Arn of the permissions boundary.
permissions_boundary_type (String) Type of the permissions boundary.
tags (Attributes Set) The list of Tags associated with the role.. Default: []. Updatable. (see below for nested schema)

Read-Only

path (String) The path to the IAM Role. Defaults to / and only / is allowed

Nested Schema for `tags`

Optional:

key (String) Key of the tag associated to the role.
value (String) Value of the tag associated to the role.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_role.example <role_name:namespace>
# Example:
terraform import objectscale_iam_role.iam_role example_role:ns1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_saml_provider resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_saml_provider (Resource)

Manages an ObjectScale IAM SAML Identity Provider (external IdP) registration.

Example Usage

# Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

# Register an external SAML IdP (e.g. Okta / Azure AD / ADFS) with ObjectScale.
resource "objectscale_iam_saml_provider" "corp" {
  name      = "corp-saml"
  namespace = "ns1"

  # Provide the IdP's SAML metadata XML (typically downloaded from the IdP admin
  # console). Updates trigger an in-place rotation; changing `name` or
  # `namespace` triggers destroy + recreate.
  saml_metadata_document = file("${path.module}/idp-metadata.xml")
}

output "saml_provider_arn" {
  value = objectscale_iam_saml_provider.corp.arn
}

Schema

Required

name (String) The SAML Provider name. Cannot be changed after creation.
saml_metadata_document (String) Raw SAML metadata XML for the IdP.

Optional

namespace (String) Namespace of the SAML Provider. Cannot be changed after creation.

Read-Only

arn (String) ARN of the SAML Provider.
create_date (String) ISO 8601 creation timestamp of the SAML Provider.
id (String) The provider ARN, also used as resource ID.
valid_until (String) ISO 8601 timestamp at which the SAML Provider metadata signing certificate expires.

Unless specified otherwise, all fields of this resource can be updated.

V1.1.0: objectscale_iam_service_provider resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_service_provider (Resource)

Manages the ObjectScale SAML Service Provider configuration (singleton per cluster).

Example Usage

# Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

# Configure ObjectScale itself as a SAML Service Provider. Singleton: at most
# one resource of this type per cluster.
resource "objectscale_iam_service_provider" "sp" {
  dns           = "objectscale.example.com"
  java_keystore = filebase64("${path.module}/keystore.jks")
  key_alias     = "saml"
  key_password  = var.keystore_password
}

variable "keystore_password" {
  type      = string
  sensitive = true
}

Schema

Required

dns (String) Service Provider base URL for the SAML ACS.
java_keystore (String, Sensitive) Base64-encoded Java KeyStore.
key_alias (String) KeyStore entry alias.
key_password (String, Sensitive) KeyStore password.

Read-Only

create_time (String) ISO 8601 creation timestamp.
etag (String) Optimistic concurrency tag.
id (String) Singleton ID; always equal to objectscale-sp.
last_modified (String) ISO 8601 last-modified timestamp.
unique_id (String) KeyStore unique ID.
uuid (String) Entity Id component.

Unless specified otherwise, all fields of this resource can be updated.

V1.1.0: objectscale_iam_user resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_user (Resource)

This resource manages the full lifecycle of an Dell ObjectScale IAM user.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a new user with the name set in `name` attribute on the ObjectScale

resource "objectscale_iam_user" "example_iam_user" {
  name                     = "example_iam_user_1"
  namespace                = "ns1"
  permissions_boundary_arn = "urn:ecs:iam:::policy/ECSS3FullAccess"
  tags = [
    {
      "key" : "key1",
      "value" : "value1"
    },
    {
      "key" : "key2",
      "value" : "value2"
    }
  ]
}

# After the execution of above resource block, namespace would have been created on the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

name (String) Name of the user. Required.
namespace (String) Namespace to which the user belongs to.

Optional

permissions_boundary_arn (String) Arn of the permissions boundary.
tags (Attributes Set) Tags associated to the user. Default: []. Updatable. (see below for nested schema)

Read-Only

arn (String) Arn of the user.
create_date (String) Date of creation of the IAM user.
id (String) Identifier that is generated by ObjectScale when the resource is created.
path (String) Path of the IAM user.
permissions_boundary_type (String) Type of the permissions boundary.

Nested Schema for `tags`

Optional:

key (String) Key of the tag associated to the user.
value (String) Value of the tag associated to the user.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_user.iam_user <user_name:namespace>
# Example:
terraform import objectscale_iam_user.iam_user example_iam_user:name_space_1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_iam_user_access_key resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_iam_user_access_key (Resource)

This resource Enables the creation and management of secure programmatic access for Dell ObjectScale users by provisioning and controlling S3 compatible access keys.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a new user access key with the name set in `name` attribute on the ObjectScale

resource "objectscale_iam_user_access_key" "test_iam_user_access_key" {
  username  = "sample_user_1"
  namespace = "ns1"
  status    = "Active"
  id        = "AKIA80817B9F1F4C72CB"


}

# After the execution of above resource block, access key would have been created on the user of the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

namespace (String) Namespace to which the user belongs to.
username (String) Name of the user to which the key is attached. Required.

Optional

status (String) Status of the access key attached to the user.

Read-Only

create_date (String) Creation date of the access key.
id (String) Identifier that is generated by ObjectScale when the resource is created.
secret_access_key (String, Sensitive) Secret access key associated with the user.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_iam_user.iam_user_access_key <access_key_id:user_name:namespace>
# Example:
terraform import objectscale_iam_user_access_key.iam_user_access_key example_access_key_id:example_iam_user:name_space_1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_management_user resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_management_user (Resource)

This resource manages Dell ObjectScale management users. Supported types include LOCALUSER, ADLDAPUSER, and ADLDAP_GROUP.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# Create, Update, and Delete operations require SECURITY_ADMIN role.
# Read operation requires any one of SECURITY_ADMIN, SYSTEM_ADMIN, SYSTEM_MONITOR roles.
# Running `terraform apply` will create/update the management user with the specified roles in the ObjectScale
resource "objectscale_management_user" "example" {
  # Required. Possible values are LOCAL_USER/AD_LDAP_USER/AD_LDAP_GROUP
  type = "LOCAL_USER"
  # Required. Format is "user1" for LOCAL_USER and "user1@domain" for AD_LDAP_USER/AD_LDAP_GROUP 
  name = "localuser1"

  # Required for LOCAL_USER and not applicable for AD_LDAP_USER/AD_LDAP_GROUP
  password = "pass123"

  # Optional parameters. If set to true, assigns the management user to that role.
  system_administrator   = true
  system_monitor         = true
  security_administrator = true
}

Schema

Required

name (String) Management user id. Format is as follows: For LOCAL_USER use “user1”. For AD/LDAP User/Group use “user1@domain”.
type (String) Type of management user. Allowed values: LOCAL_USER, AD_LDAP_USER, AD_LDAP_GROUP.

Optional

password (String, Sensitive) Password for the management user. Password is required for LOCAL_USER and is not applicable for AD_LDAP_USER/AD_LDAP_GROUP.
security_administrator (Boolean) If set to true, assigns the management user to the Security Admin role. Security Administrators perform user management and security related administration.
system_administrator (Boolean) If set to true, assigns the management user to the System Admin role. System Administrators perform system level administration (VDC administration) and namespace administration.
system_monitor (Boolean) If set to true, assigns the management user to the System Monitor role. System Monitors have read-only access to the ObjectScale Portal.

Read-Only

id (String) Unique identifier for the management user.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_management_user.example <name>
# <name>: The name of the LOCAL_USER, AD_LDAP_USER, or AD_LDAP_GROUP.
# Examples:
# terraform import objectscale_management_user.example localuser1
# terraform import objectscale_management_user.example user1@domain
# terraform import objectscale_management_user.example group1@domain

# after running this command, populate the other parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_namespace resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_namespace (Resource)

This resource manages the full lifecycle of a Dell ObjectScale Namespace; It also configures key tenant-level settings—such as quotas.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a new namespace with the name set in `name` attribute on the ObjectScale

resource "objectscale_namespace" "all" {
  name                        = "namespace1"
  default_data_services_vpool = "urn:storageos:ReplicationGroupInfo:55ca12b2-e908-4bac-a5fe-3fdaa975e3eb:global"
  allowed_vpools_list = [
    "urn:storageos:ReplicationGroupInfo:cd8bffcb-7a99-4023-82a8-982054fd73c2:global"
  ]
  disallowed_vpools_list = [
    "urn:storageos:ReplicationGroupInfo:e0b539a3-6ddd-4412-b4d0-ce08049f64cd:global"
  ]
  namespace_admins = "admin2,admin3"
  user_mapping = [{
    domain = "domain2"
    groups = ["group3", "group4"]
    attributes = [
      {
        key   = "key3"
        value = ["value5", "value6"]
      },
      {
        key   = "key4"
        value = ["value7", "value8"]
      }
    ]
  }]
  default_bucket_block_size       = 1024
  external_group_admins           = "admin3@foo,admin4@bar"
  is_stale_allowed                = true
  is_object_lock_with_ado_allowed = true
  retention_classes = [
    {
      name   = "class1"
      period = 500
    },
    {
      name   = "class2"
      period = 2000
    }
  ]
  quota = {
    notification_size = 90
    block_size        = 124
  }
  root_user_password = "password1"
}

# After the execution of above resource block, namespace would have been created on the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

default_data_services_vpool (String) Default replication group identifier for this tenant when creating buckets. Required. Updatable.
name (String) Name assigned to this resource in ObjectScale. The resource name is set by a user and can be changed at any time. It is not a unique identifier. Required.

Optional

allowed_vpools_list (List of String) List of replication group that are allowed access to namespace.
current_root_user_password (String, Sensitive) Current root user password. Only to be provided when updating the root user password.
default_audit_delete_expiration (Number) Default bucket audit delete expiration. Updatable.
default_bucket_block_size (Number) Default bucket quota size. Default: -1. Updatable.
disallowed_vpools_list (List of String) List of replication group that are not allowed access to namespace.
external_group_admins (String) List of groups from AD Server. Default: ‘’. Updatable.
is_compliance_enabled (Boolean) Namespace isComplianceEnabled flag. Default: false.
is_encryption_enabled (Boolean) Encryption status of the namesapce. Default: false.
is_object_lock_with_ado_allowed (Boolean) Defines the default behavior for allowing Object Lock with ADO on new buckets created in the namespace. Default: false. Updatable.
is_stale_allowed (Boolean) Namespace isStaleAllowed flag. Default: false. Updatable..
namespace_admins (String) Comma separated list of namespace admins. Default: ‘’. Updatable.
quota (Attributes) Namespace Quota. (see below for nested schema)
retention_classes (Attributes Set) Retention Class. (see below for nested schema)
root_user_password (String, Sensitive) root user password.
user_mapping (Attributes List) User Mapping. Default: []. Updatable. (see below for nested schema)

Read-Only

id (String) Identifier that is generated by ObjectScale when the resource is created. The resource Id is guaranteed to be unique and immutable across all virtual data centers for all time.
root_user_name (String) root user name.

Nested Schema for `quota`

Optional:

block_size (Number) Block Size in GB. Default: -1. Updatable.
notification_size (Number) Notification Size in GB. Default: -1. Updatable.

Nested Schema for `retention_classes`

Required:

name (String) Name of the retention class.
period (Number) Period of the retention class in seconds.

Nested Schema for `user_mapping`

Optional:

attributes (Attributes List) Attributes. (see below for nested schema)
domain (String) A single-valued attribute indicating the user’s IDP domain
groups (List of String) Groups.

Nested Schema for `user_mapping.attributes`

Optional:

key (String) Lookup string for this key-value pair
value (List of String) Lookup result for this key-value pair.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_namespace.namespace <id>
# Example:
terraform import objectscale_namespace.namespace namespace_id
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_object_certificate resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_object_certificate (Resource)

This resource manages the Object data-plane (S3) TLS certificate on Dell ObjectScale. Supports custom certificate upload or self-signed certificate generation.

Schema

Optional

certificate_chain (String) Certificate chain in PEM format. Required when system_selfsigned is not set. Mutually exclusive with system_selfsigned.
ip_addresses (List of String) List of IP addresses for self-signed certificate SANs. Only used when system_selfsigned is true.
private_key (String, Sensitive) Private key in PEM format. Supports PKCS#1 (RSA PRIVATE KEY) and PKCS#8 (PRIVATE KEY) formats. PKCS#8 is supported on OBS 4.3+, but OBS 4.1 requires PKCS#1. Required when system_selfsigned is not set. Mutually exclusive with system_selfsigned.
system_selfsigned (Boolean) Generate a self-signed certificate. Mutually exclusive with private_key and certificate_chain. Forces resource replacement.

Read-Only

current_certificate_chain (String) The currently active certificate chain as read from the ObjectScale API.
id (String) Identifier for the Object certificate resource.

Unless specified otherwise, all fields of this resource can be updated.

V1.1.0: objectscale_object_user resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_object_user (Resource)

This resource manages Dell ObjectScale object users within a namespace.

Example Usage

/*
Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a new object user with the name set in `name` attribute on the ObjectScale

resource "objectscale_object_user" "test_object_user" {
  name      = "example_object_user_1"
  namespace = "ns1"
  tags = [
    {
      "name" : "example_name",
      "value" : "example_value"
    }
  ]
  locked = false
}

# After the execution of above resource block, object user would have been created on the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

name (String) Name of the user. Required.
namespace (String) Namespace to which the user belongs to.

Optional

locked (Boolean) Lock status of the object user.
tags (Attributes Set) Tags associated to the object user. Default: []. Updatable. (see below for nested schema)

Read-Only

created (String) Timestamp of the creation of the object user.
id (String) ID of the user. Required.

Nested Schema for `tags`

Optional:

name (String) Key of the tag associated to the user.
value (String) Value of the tag associated to the user.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2025 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_object_user.object_user <object_user_name>
# Example:
terraform import objectscale_object_user.object_user example_object_user
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_object_user_secret_key resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_object_user_secret_key (Resource)

This resource allows end user to provision and manage an Dell ObjectScale user’s S3 credentials—creating, reading, rotating (updating), and deleting an access/secret key pair tied to a specific ObjectScale user.

Example Usage

/*
Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Available actions: Create, Update, Delete and Import
# After `terraform apply` of this example file it will create a new user access key with the name set in `name` attribute on the ObjectScale

resource "objectscale_object_user_secret_key" "test_object_user_secret_key" {
  username       = "sample_user_2"
  namespace      = "ns1"
  expiry_in_mins = "2"
}

# After the execution of above resource block, access key would have been created on the user of the ObjectScale array. For more information, Please check the terraform state file.

Schema

Required

namespace (String) Namespace to which the user belongs to.
username (String) Name of the user to which the key is attached. Required.

Optional

expiry_in_mins (String) Expiry of the existing secret key in minutes.
secret_key (String, Sensitive) Secret key associated with the user.

Read-Only

id (String) Identifier that is generated by ObjectScale when the resource is created.
key_expiry_timestamp (String) Expiry timestamp of the key.
key_timestamp (String) Timestamp of creation of the key.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_object_user_secret_key.test_object_user_secret_key <secret_key_id:user_name:namespace>
# Example:
terraform import objectscale_object_user_secret_key.test_object_user_secret_key example_secret_key_id:example_object_user:name_space_1
# after running this command, populate the name field and other required parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_replication_group resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_replication_group (Resource)

This resource allows end user to Provision and manage Dell ObjectScale Replication Groups.

Note: Deletion of Replication Group is not supported. If this resource gets planned for deletion, it will simply be removed from the state. But the Replication Group will not be destroyed on the ObjectScale array.

Caution: This resource does support removal of zones from Replication Group. But be cautious that removing zones from replication group may result in data loss. We recommend contacting customer support before performing this operation. Data loss may occur if prerequisite procedures are not properly followed. Verify the following conditions:
- Ensure that Geo replication is up-to-date.
- Replication to/from VDC for the Replication Group will be disabled.
- Recovery will be initiated. Data may not be available until recovery is complete.
- Removal is permanent; the site cannot be added back to this replication group.
- Data associated with this replication group will be permanently deleted from this VDC.
- In cases where XOR encoding is utilized and the RG falls below 3 VDCs, the XOR encoded data will have to be replaced with fully replicated copies, which could significantly increase storage required to fully protect the data.

Example Usage

/*
Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

Licensed under the Mozilla Public License Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://mozilla.org/MPL/2.0/


Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

# Example of getting the pre-requisite VDCs and Storage Pools
data "objectscale_vdc" "vdcs" {
  for_each = toset(["vdc1", "vdc2", "vdc3"])
  name     = each.value
}

data "objectscale_storage_pool" "sps" {
  for_each = toset(["vdc1", "vdc2", "vdc3"])
  # this example assumes that each VDC has a storage pool named "sp1"
  name   = "sp1"
  vdc_id = data.objectscale_vdc.vdcs[each.value].vdcs[0].id
}

# Example 1: Active Replication group with 3 VDCs
resource "objectscale_replication_group" "active" {
  name        = "ActiveRG"
  description = "Active replication group"
  zone_mappings = [
    {
      vdc          = data.objectscale_vdc.vdcs["vdc1"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc1"].storage_pools[0].id
    },
    {
      vdc          = data.objectscale_vdc.vdcs["vdc2"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc2"].storage_pools[0].id
    },
    {
      vdc          = data.objectscale_vdc.vdcs["vdc3"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc3"].storage_pools[0].id
    }
  ]
  enable_rebalancing   = true
  allow_all_namespaces = true
}

# Example 2: Active Replication group with data being replicated fully to all sites
resource "objectscale_replication_group" "fully_replicated" {
  name        = "FullyReplicatedRG"
  description = "Fully replicated Active replication group"
  zone_mappings = [
    {
      vdc          = data.objectscale_vdc.vdcs["vdc1"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc1"].storage_pools[0].id
    },
    {
      vdc          = data.objectscale_vdc.vdcs["vdc2"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc2"].storage_pools[0].id
    }
  ]
  replicate_to_all_sites = true
}

# Example 3: Passive Replication group
# Passive replication always has 3 zones, with 1 zone as a target
resource "objectscale_replication_group" "passive" {
  name        = "PassiveRG"
  description = "Passive replication group"
  zone_mappings = [
    {
      vdc          = data.objectscale_vdc.vdcs["vdc1"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc1"].storage_pools[0].id
    },
    {
      vdc          = data.objectscale_vdc.vdcs["vdc2"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc2"].storage_pools[0].id
    },
    {
      vdc          = data.objectscale_vdc.vdcs["vdc3"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc3"].storage_pools[0].id
      # this is the target VDC
      is_replication_target = true
    }
  ]
}

# Example 4: A replication group that should not be removed from the state by accident
# A replication group cannot be deleted in ObjectScale.
# If a destroy plan is applied, this resource simply removes itself from state, but the replication group remains in ObjectScale.
# If your usecase requires that the resource throw an error if it is being destroyed, set the prevent_destroy lifecycle attribute
resource "objectscale_replication_group" "non_destroyable" {
  name = "NotDestroyableRG"
  zone_mappings = [
    {
      vdc          = data.objectscale_vdc.vdcs["vdc1"].vdcs[0].id
      storage_pool = data.objectscale_storage_pool.sps["vdc1"].storage_pools[0].id
    }
  ]

  lifecycle {
    # this lifecycle attribute prevents accidental removal of this resource from state
    prevent_destroy = true
  }
}

Schema

Required

name (String) Name of the Replication Group.
zone_mappings (Attributes Set) List of zones (VDC + Storage Pool) which will be used for replication. (see below for nested schema)

Optional

allow_all_namespaces (Boolean) Whether to allow all namespaces.
description (String) Description of the Replication Group.
enable_rebalancing (Boolean) Enable Rebalancing.
replicate_to_all_sites (Boolean) Whether to replicate to all sites (for Active configuration). Cannot be updated.

Read-Only

id (String) Identifier of the Replication Group.
type (String) Type of the Replication Group (Active/Passive). Cannot be updated.

Nested Schema for `zone_mappings`

Required:

storage_pool (String) Storage Pool ID.
vdc (String) Virtual Data Center ID.

Optional:

is_replication_target (Boolean) In passive replication groups, one zone acts as the target. This attribute must be set to true for the zone which will act as the replication target.

Unless specified otherwise, all fields of this resource can be updated.

Import

Import is supported using the following syntax:

# Copyright (c) 2026 Dell Inc., or its subsidiaries. All Rights Reserved.

# Licensed under the Mozilla Public License Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at

#     http://mozilla.org/MPL/2.0/


# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.


# The command is
# terraform import objectscale_replication_group.<resource_name> <name of the replication group>
# Examples:
terraform import objectscale_replication_group.rg1 "ReplicationGroup1"

# after running this command, populate the other parameters in the config file to start managing this resource.
# Note: running "terraform show" after importing shows the current config/state of the resource. You can copy/paste that config to make it easier to manage the resource.

V1.1.0: objectscale_vdc_certificate resource

Mon, 01 Jan 0001 00:00:00 +0000

objectscale_vdc_certificate (Resource)

This resource manages the VDC management-plane TLS certificate on Dell ObjectScale. Certificates always exist on a VDC; this resource replaces (not creates/deletes) the active certificate.

Schema

Required

certificate_chain (String) Certificate chain in PEM format. Must contain at least one CERTIFICATE block.
private_key (String, Sensitive) Private key in PEM format. Supports PKCS#1 (RSA PRIVATE KEY) and PKCS#8 (PRIVATE KEY) formats. PKCS#8 is supported on OBS 4.3+, but OBS 4.1 requires PKCS#1. Convert PKCS#8 to PKCS#1 for OBS 4.1 compatibility using: openssl rsa -in key.pem -out key-pkcs1.pem

Read-Only

current_certificate_chain (String) The currently active certificate chain as read from the ObjectScale API. May be stale for up to 1 hour after a VDC certificate update.
id (String) Identifier for the VDC certificate resource.

Unless specified otherwise, all fields of this resource can be updated.

Dell Technologies – Resources

V1.1.0: objectscale_bucket resource

objectscale_bucket (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for custom_group_acl

Nested Schema for group_acl

Nested Schema for min_max_governor

Nested Schema for search_metadata

Nested Schema for tag

Nested Schema for user_acl

Import

V1.1.0: objectscale_iam_group resource

objectscale_iam_group (Resource)

Example Usage

Schema

Required

Read-Only

Import

V1.1.0: objectscale_iam_group_membership resource

objectscale_iam_group_membership (Resource)

Example Usage

Schema

Required

V1.1.0: objectscale_iam_inline_policy resource

objectscale_iam_inline_policy (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for policies

Import

V1.1.0: objectscale_iam_policy resource

objectscale_iam_policy (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Import

V1.1.0: objectscale_iam_policy_attachment resource

objectscale_iam_policy_attachment (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Import

V1.1.0: objectscale_iam_role resource

objectscale_iam_role (Resource)

Example Usage

Schema

Required

Optional

Read-Only

Nested Schema for tags

Import

V1.1.0: objectscale_iam_saml_provider resource

objectscale_iam_saml_provider (Resource)

Example Usage

Schema

Required

Optional

Read-Only

V1.1.0: objectscale_iam_service_provider resource

objectscale_iam_service_provider (Resource)

Example Usage

Schema

Required

Read-Only

V1.1.0: objectscale_iam_user resource

objectscale_iam_user (Resource)

Example Usage

Schema

Required

Optional

Nested Schema for `custom_group_acl`

Nested Schema for `group_acl`

Nested Schema for `min_max_governor`

Nested Schema for `search_metadata`

Nested Schema for `tag`

Nested Schema for `user_acl`

Nested Schema for `policies`

Nested Schema for `tags`

Nested Schema for `tags`

Nested Schema for `quota`

Nested Schema for `retention_classes`

Nested Schema for `user_mapping`

Nested Schema for `user_mapping.attributes`

Nested Schema for `tags`

Nested Schema for `zone_mappings`