Introduce variables for destroying things

terraform/build.tf

@@ -17,7 +17,7 @@ resource "google_storage_bucket" "cloudbuild-cache" {
   name     = "${var.project}-cloudbuild-cache"
   location = var.storage_location
 
-  force_destroy               = true
+  force_destroy               = var.force_destroy
   uniform_bucket_level_access = true
 
   // Automatically expire cached objects.

terraform/database.tf

@@ -17,6 +17,8 @@ resource "google_sql_database_instance" "db-inst" {
   region           = var.db_location
   database_version = var.db_version
 
+  deletion_protection = !var.force_destroy
+
   settings {
     tier              = var.cloudsql_tier
     disk_size         = var.cloudsql_disk_size_gb
@@ -81,6 +83,8 @@ resource "google_sql_database_instance" "replicas" {
 
   master_instance_name = google_sql_database_instance.db-inst.name
 
+  deletion_protection = !var.force_destroy
+
   // These are REGIONAL replicas, which cannot auto-failover. The default
   // configuration has auto-failover in zones. This is for super disaster
   // recovery in which an entire region is down for an extended period of time.
@@ -223,7 +227,7 @@ resource "google_storage_bucket" "backups" {
   name     = "${var.project}-backups"
   location = var.storage_location
 
-  force_destroy               = true
+  force_destroy               = var.force_destroy
   uniform_bucket_level_access = true
 
   versioning {

terraform/storage.tf

@@ -39,6 +39,8 @@ resource "google_storage_bucket" "export" {
       type = "Delete"
     }
   }
+
+  force_destroy = var.force_destroy
 }
 
 resource "google_storage_bucket_iam_member" "public" {

terraform/vars.tf

@@ -12,6 +12,13 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+variable "force_destroy" {
+  type    = bool
+  default = false
+
+  description = "Allow resources like buckets and database instances to be destroyed."
+}
+
 variable "create_env_file" {
   type    = bool
   default = false