context = {
  artifact_registries = {
    upstream-one = "projects/actual-project-id/locations/europe-west8/repositories/upstream"
  }
  condition_vars = {
    organization = {
      id = "1234567890"
    }
  }
  custom_roles = {
    myrole_one   = "organizations/366118655033/roles/myRoleOne"
    myrole_two   = "organizations/366118655033/roles/myRoleTwo"
    myrole_three = "organizations/366118655033/roles/myRoleThree"
    myrole_four  = "organizations/366118655033/roles/myRoleFour"
  }
  iam_principals = {
    mysa    = "serviceAccount:test@test-project.iam.gserviceaccount.com"
    myuser  = "user:test-user@example.com"
    myuser2 = "user:test-user2@example.com"
  }
  locations = {
    ew8 = "europe-west8"
  }
  project_ids = {
    myproject = "actual-project-id"
  }
  tag_values = {
    "test/one" = "tagValues/1234567890"
  }
}
project_id = "$project_ids:myproject"
name       = "myregistry"
location   = "$locations:ew8"
format = {
  docker = {
    virtual = {
      upstream-one = {
        repository = "$artifact_registries:upstream-one"
        priority   = 100
      }
    }
  }
}
iam = {
  "$custom_roles:myrole_one" = ["$iam_principals:myuser"]
  "roles/viewer"             = ["$iam_principals:mysa"]
}
iam_bindings = {
  myrole_two = {
    role    = "$custom_roles:myrole_two"
    members = ["$iam_principals:mysa"]
    condition = {
      title      = "Test"
      expression = "resource.matchTag('$${organization.id}/environment', 'development')"
    }
  }
}
iam_bindings_additive = {
  myrole_three = {
    role   = "$custom_roles:myrole_three"
    member = "$iam_principals:mysa"
  }
}
iam_by_principals = {
  "$iam_principals:myuser2" = [
    "$custom_roles:myrole_three",
    "$custom_roles:myrole_four",
    "roles/owner",
  ]
}
tag_bindings = {
  foo = "$tag_values:test/one"
}
