# Copyright 2026 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     https://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

values:
  module.project-factory.google_network_security_dns_threat_detector.dns_threat_detector["dev-ta-app0-be"]:
    effective_labels:
      goog-terraform-provisioned: 'true'
    excluded_networks: []
    labels: null
    location: global
    name: test-pf-dev-ta-app0-be
    project: test-pf-dev-ta-app0-be
    terraform_labels:
      goog-terraform-provisioned: 'true'
    threat_detector_provider: null
    timeouts: null
  module.project-factory.module.automation-bucket["dev-tb-app0-0/automation/tf-state"].google_storage_bucket.bucket[0]:
    autoclass: []
    cors: []
    custom_placement_config: []
    default_event_based_hold: null
    effective_labels:
      goog-terraform-provisioned: 'true'
    enable_object_retention: null
    encryption: []
    force_destroy: false
    hierarchical_namespace: []
    ip_filter: []
    labels: null
    lifecycle_rule: []
    location: EU
    logging:
    - log_bucket: log-bucket
      log_object_prefix: log-prefix
    name: test-pf-dev-tb-app0-0-tf-state
    project: test-pf-teams-iac-0
    requester_pays: null
    retention_policy: []
    storage_class: STANDARD
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
    uniform_bucket_level_access: true
    versioning:
    - enabled: false
  ? module.project-factory.module.automation-bucket["dev-tb-app0-0/automation/tf-state"].google_storage_bucket_iam_binding.authoritative["roles/storage.objectCreator"]
  : bucket: test-pf-dev-tb-app0-0-tf-state
    condition: []
    members:
    - serviceAccount:dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    role: roles/storage.objectCreator
    timeouts: null
  ? module.project-factory.module.automation-bucket["dev-tb-app0-0/automation/tf-state"].google_storage_bucket_iam_binding.authoritative["roles/storage.objectViewer"]
  : bucket: test-pf-dev-tb-app0-0-tf-state
    condition: []
    members:
    - group:gcp-devops@example.org
    - group:team-b-admins@example.org
    - serviceAccount:dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
    - serviceAccount:dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    role: roles/storage.objectViewer
    timeouts: null
  ? module.project-factory.module.automation-service-accounts["dev-tb-app0-0/automation/ro"].google_service_account.service_account[0]
  : account_id: dev-tb-app0-0-ro
    create_ignore_already_exists: null
    description: Team B app 0 read-only automation sa.
    disabled: false
    display_name: Service account ro for dev-tb-app0-0.
    email: dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
    member: serviceAccount:dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
    project: test-pf-teams-iac-0
    timeouts: null
  ? module.project-factory.module.automation-service-accounts["dev-tb-app0-0/automation/rw"].google_service_account.service_account[0]
  : account_id: dev-tb-app0-0-rw
    create_ignore_already_exists: null
    description: Team B app 0 read/write automation sa.
    disabled: false
    display_name: Service account rw for dev-tb-app0-0.
    email: dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    member: serviceAccount:dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    project: test-pf-teams-iac-0
    timeouts: null
  module.project-factory.module.bigquery-datasets["dev-ta-app0-be/test_0"].google_bigquery_dataset.default:
    dataset_id: test_0
    default_encryption_configuration: []
    default_partition_expiration_ms: null
    default_table_expiration_ms: null
    delete_contents_on_destroy: false
    description: Terraform managed.
    effective_labels:
      goog-terraform-provisioned: 'true'
    external_catalog_dataset_options: []
    external_dataset_reference: []
    friendly_name: Test Dataset
    labels: null
    location: EU
    max_time_travel_hours: '168'
    project: test-pf-dev-ta-app0-be
    resource_tags: null
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
  ? module.project-factory.module.bigquery-datasets["dev-ta-app0-be/test_0"].google_bigquery_dataset_iam_binding.authoritative["roles/bigquery.dataViewer"]
  : condition: []
    dataset_id: test_0
    members:
    - group:gcp-devops@example.org
    project: test-pf-dev-ta-app0-be
    role: roles/bigquery.dataViewer
  module.project-factory.module.billing-budgets[0].google_billing_budget.default["test-100"]:
    all_updates_rule:
    - disable_default_iam_recipients: true
      enable_project_level_recipients: false
      pubsub_topic: null
      schema_version: '1.0'
    amount:
    - last_period_amount: null
      specified_amount:
      - nanos: null
        units: '100'
    billing_account: 123456-123456-123456
    budget_filter:
    - calendar_period: null
      credit_types: null
      credit_types_treatment: INCLUDE_ALL_CREDITS
      custom_period: []
      resource_ancestors:
      - folders/1234567890
      subaccounts: null
    display_name: 100 dollars in current spend
    ownership_scope: null
    threshold_rules:
    - spend_basis: CURRENT_SPEND
      threshold_percent: 0.5
    - spend_basis: CURRENT_SPEND
      threshold_percent: 0.75
    timeouts: null
  module.project-factory.module.billing-budgets[0].google_monitoring_notification_channel.default["billing-default"]:
    description: null
    display_name: Budget email notification billing-default.
    enabled: true
    force_delete: false
    labels:
      email_address: gcp-billing-admins@example.org
    project: foo-billing-audit
    sensitive_labels: []
    timeouts: null
    type: email
    user_labels: null
  module.project-factory.module.buckets["dev-ta-app0-be/app-0-bucket-a"].google_storage_bucket.bucket[0]:
    autoclass: []
    cors: []
    custom_placement_config: []
    default_event_based_hold: null
    effective_labels:
      goog-terraform-provisioned: 'true'
    enable_object_retention: null
    encryption: []
    force_destroy: false
    hierarchical_namespace: []
    ip_filter: []
    labels: null
    lifecycle_rule: []
    location: EUROPE-WEST8
    logging: []
    name: test-pf-dev-ta-app0-be-app-0-bucket-a
    project: test-pf-dev-ta-app0-be
    requester_pays: null
    retention_policy: []
    storage_class: STANDARD
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
    uniform_bucket_level_access: true
    versioning:
    - enabled: false
  module.project-factory.module.buckets["dev-ta-app0-be/app-0-bucket-a"].google_tags_location_tag_binding.binding["context"]:
    location: europe-west8
    parent: //storage.googleapis.com/projects/_/buckets/test-pf-dev-ta-app0-be-app-0-bucket-a
    tag_value: tagValues/654321
    timeouts: null
  module.project-factory.module.buckets["dev-ta-app0-be/app-0-bucket-b"].google_storage_bucket.bucket[0]:
    autoclass: []
    cors: []
    custom_placement_config: []
    default_event_based_hold: null
    effective_labels:
      goog-terraform-provisioned: 'true'
    enable_object_retention: null
    encryption: []
    force_destroy: false
    hierarchical_namespace: []
    ip_filter: []
    labels: null
    lifecycle_rule: []
    location: EUROPE-WEST8
    logging:
    - log_bucket: log-bucket
      log_object_prefix: log-prefix
    name: test-pf-dev-ta-app0-be-app-0-bucket-b
    project: test-pf-dev-ta-app0-be
    requester_pays: null
    retention_policy: []
    storage_class: STANDARD
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
    uniform_bucket_level_access: true
    versioning:
    - enabled: false
  module.project-factory.module.folder-1-iam["team-a"].google_folder_iam_audit_config.default["storage.googleapis.com"]:
    audit_log_config:
    - exempted_members:
      - group:gcp-devops@example.org
      log_type: DATA_READ
    service: storage.googleapis.com
  module.project-factory.module.folder-1-iam["team-a"].google_folder_iam_binding.authoritative["roles/viewer"]:
    condition: []
    members:
    - group:gcp-devops@example.org
    - group:team-a-admins@example.org
    role: roles/viewer
  module.project-factory.module.folder-1["team-a"].google_folder.folder[0]:
    deletion_protection: false
    display_name: Team A
    parent: folders/5678901234
    tags: null
    timeouts: null
  module.project-factory.module.folder-1["team-b"].google_folder.folder[0]:
    deletion_protection: false
    display_name: Team B
    parent: folders/5678901234
    tags: null
    timeouts: null
  module.project-factory.module.folder-1["team-c"].google_folder.folder[0]:
    deletion_protection: false
    display_name: Team C
    parent: folders/5678901234
    tags: null
    timeouts: null
  ? module.project-factory.module.folder-2-iam["team-a/app-0"].google_org_policy_policy.default["compute.disableSerialPortAccess"]
  : dry_run_spec: []
    spec:
    - inherit_from_parent: null
      reset: null
      rules:
      - allow_all: null
        condition: []
        deny_all: null
        enforce: 'FALSE'
        parameters: null
        values: []
    timeouts: null
  module.project-factory.module.folder-2-iam["team-b/app-0"].google_tags_tag_binding.binding["drs-allow-all"]:
    tag_value: tagValues/123456
    timeouts: null
  module.project-factory.module.folder-2["team-a/app-0"].google_folder.folder[0]:
    deletion_protection: false
    display_name: App 0
    tags: null
    timeouts: null
  ? module.project-factory.module.folder-2["team-a/app-0"].google_privileged_access_manager_entitlement.default["app-0-admins"]
  : additional_notification_targets: []
    approval_workflow:
    - manual_approvals:
      - require_approver_justification: true
        steps:
        - approvals_needed: 1
          approver_email_recipients: null
          approvers:
          - principals:
            - group:app-0-admins@example.org
    eligible_users:
    - principals:
      - group:app-a-ops@example.org
    entitlement_id: app-0-admins
    location: global
    max_request_duration: 3600s
    privileged_access:
    - gcp_iam_access:
      - resource_type: cloudresourcemanager.googleapis.com/Folder
        role_bindings:
        - condition_expression: null
          role: roles/writer
    requester_justification_config:
    - not_mandatory: []
      unstructured:
      - {}
    timeouts: null
  module.project-factory.module.folder-2["team-b/app-0"].google_folder.folder[0]:
    deletion_protection: false
    display_name: App 0
    tags: null
    timeouts: null
  module.project-factory.module.folder-2["team-c/apps"].google_folder.folder[0]:
    deletion_protection: false
    display_name: Apps
    tags: null
    timeouts: null
  module.project-factory.module.folder-3["team-c/apps/test"].google_folder.folder[0]:
    deletion_protection: false
    display_name: Test
    tags: null
    timeouts: null
  ? module.project-factory.module.folder-4-iam["team-c/apps/test/app-x"].google_cloud_asset_folder_feed.default["compute-instances"]
  : asset_names: null
    asset_types:
    - compute.googleapis.com/Instance
    billing_project: my-cai-feeds-project
    condition: []
    content_type: RESOURCE
    feed_id: compute-instances
    feed_output_config:
    - pubsub_destination:
      - topic: projects/my-cai-feeds-project/topics/feed
    timeouts: null
  module.project-factory.module.folder-4["team-c/apps/test/app-x"].google_folder.folder[0]:
    deletion_protection: false
    display_name: App X
    tags: null
    timeouts: null
  module.project-factory.module.kms["dev-ta-app0-be/my-keyring"].google_kms_crypto_key.default["my-key"]:
    effective_labels:
      goog-terraform-provisioned: 'true'
    labels: null
    name: my-key
    purpose: ENCRYPT_DECRYPT
    rotation_period: null
    skip_initial_version_creation: false
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
  module.project-factory.module.kms["dev-ta-app0-be/my-keyring"].google_kms_key_ring.default[0]:
    location: europe-west1
    name: my-keyring
    project: test-pf-dev-ta-app0-be
    timeouts: null
  module.project-factory.module.kms["dev-ta-app0-be/my-keyring"].google_tags_location_tag_binding.binding["context"]:
    location: europe-west1
    tag_value: $tag_values:context/project-factory
    timeouts: null
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_compute_shared_vpc_service_project.shared_vpc_service[0]
  : deletion_policy: null
    host_project: $project_ids:dev-spoke-0
    service_project: test-pf-dev-ta-app0-be
    timeouts: null
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_kms_crypto_key_iam_member.service_agent_cmek["key-0.compute-system"]
  : condition: []
    crypto_key_id: projects/kms-central-prj/locations/europe-west1/keyRings/my-keyring/cryptoKeys/ew1-compute
    role: roles/cloudkms.cryptoKeyEncrypterDecrypter
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_kms_crypto_key_iam_member.service_agent_cmek["key-0.gs-project-accounts"]
  : condition: []
    crypto_key_id: projects/kms-central-prj/locations/europe-west3/keyRings/my-keyring/cryptoKeys/europe3-gce
    role: roles/cloudkms.cryptoKeyEncrypterDecrypter
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_privileged_access_manager_entitlement.default["project-admins"]
  : additional_notification_targets: []
    approval_workflow:
    - manual_approvals:
      - require_approver_justification: true
        steps:
        - approvals_needed: 1
          approver_email_recipients: null
          approvers:
          - principals:
            - group:team-a-admins@example
    eligible_users:
    - principals:
      - group:team-a-ops@example.org
    entitlement_id: project-admins
    location: global
    max_request_duration: 3600s
    parent: projects/test-pf-dev-ta-app0-be
    privileged_access:
    - gcp_iam_access:
      - resource: //cloudresourcemanager.googleapis.com/projects/test-pf-dev-ta-app0-be
        resource_type: cloudresourcemanager.googleapis.com/Project
        role_bindings:
        - condition_expression: null
          role: roles/compute.admin
        - condition_expression: null
          role: roles/bigquery.admin
    requester_justification_config:
    - not_mandatory: []
      unstructured:
      - {}
    timeouts: null
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_binding.authoritative["roles/cloudkms.cryptoKeyEncrypterDecrypter"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/cloudkms.cryptoKeyEncrypterDecrypter
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_binding.authoritative["roles/storage.objectViewer"]
  : condition: []
    members:
    - serviceAccount:app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    - serviceAccount:app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    project: test-pf-dev-ta-app0-be
    role: roles/storage.objectViewer
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_iam["$iam_principals:gcp-devops"]
  : condition: []
    member: group:gcp-devops@example.org
    project: $project_ids:dev-spoke-0
    role: roles/compute.networkUser
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_robots["roles/compute.networkUser:container-engine"]
  : condition: []
    project: $project_ids:dev-spoke-0
    role: roles/compute.networkUser
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_robots["roles/container.hostServiceAgentUser:container-engine"]
  : condition: []
    project: $project_ids:dev-spoke-0
    role: roles/container.hostServiceAgentUser
  module.project-factory.module.projects-iam["dev-ta-app0-be"].google_tags_tag_binding.binding["context"]:
    tag_value: tagValues/654321
    timeouts: null
  ? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_tags_tag_value_iam_binding.default["my-tag-key-1/my-value-2:roles/resourcemanager.tagUser"]
  : condition: []
    members:
    - user:user@example.com
    role: roles/resourcemanager.tagUser
  module.project-factory.module.projects-iam["dev-tb-app0-0"].google_compute_shared_vpc_host_project.shared_vpc_host[0]:
    project: test-pf-dev-tb-app0-0
    timeouts: null
  ? module.project-factory.module.projects-iam["dev-tb-app0-0"].google_project_iam_audit_config.default["storage.googleapis.com"]
  : audit_log_config:
    - exempted_members:
      - group:gcp-devops@example.org
      log_type: DATA_READ
    project: test-pf-dev-tb-app0-0
    service: storage.googleapis.com
  module.project-factory.module.projects-iam["dev-tb-app0-0"].google_project_iam_binding.authoritative["roles/owner"]:
    condition: []
    members:
    - serviceAccount:dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-0
    role: roles/owner
  module.project-factory.module.projects-iam["dev-tb-app0-0"].google_project_iam_binding.authoritative["roles/viewer"]:
    condition: []
    members:
    - serviceAccount:dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-0
    role: roles/viewer
  module.project-factory.module.projects-iam["dev-tb-app0-1"].google_project_iam_binding.authoritative["roles/run.admin"]:
    condition: []
    members:
    - serviceAccount:app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-1
    role: roles/run.admin
  ? module.project-factory.module.projects-iam["dev-tb-app0-1"].google_project_iam_binding.authoritative["roles/run.developer"]
  : condition: []
    members:
    - serviceAccount:app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-1
    role: roles/run.developer
  ? module.project-factory.module.projects-iam["teams-iac-0"].google_org_policy_policy.default["compute.disableSerialPortAccess"]
  : dry_run_spec: []
    name: projects/test-pf-teams-iac-0/policies/compute.disableSerialPortAccess
    parent: projects/test-pf-teams-iac-0
    spec:
    - inherit_from_parent: null
      reset: null
      rules:
      - allow_all: null
        condition: []
        deny_all: null
        enforce: 'FALSE'
        parameters: null
        values: []
    timeouts: null
  ? module.project-factory.module.projects-iam["teams-iac-0"].google_org_policy_policy.default["gcp.restrictCmekCryptoKeyProjects"]
  : dry_run_spec: []
    name: projects/test-pf-teams-iac-0/policies/gcp.restrictCmekCryptoKeyProjects
    parent: projects/test-pf-teams-iac-0
    spec:
    - inherit_from_parent: null
      reset: null
      rules:
      - allow_all: null
        condition: []
        deny_all: null
        enforce: null
        parameters: null
        values:
        - denied_values: null
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].data.google_storage_project_service_account.gcs_sa[0]:
    project: test-pf-dev-ta-app0-be
    user_project: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_essential_contacts_contact.contact["admin@example.org"]:
    email: admin@example.org
    language_tag: en
    notification_category_subscriptions:
    - ALL
    parent: projects/test-pf-dev-ta-app0-be
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_project.project[0]:
    auto_create_network: false
    billing_account: 012345-67890A-BCDEF0
    deletion_policy: DELETE
    effective_labels:
      app: app-0
      environment: test
      goog-terraform-provisioned: 'true'
      team: team-a
    labels:
      app: app-0
      environment: test
      team: team-a
    name: test-pf-dev-ta-app0-be
    org_id: null
    project_id: test-pf-dev-ta-app0-be
    tags: null
    terraform_labels:
      app: app-0
      environment: test
      goog-terraform-provisioned: 'true'
      team: team-a
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["compute-system"]:
    condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/compute.serviceAgent
  ? module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["container-engine-robot"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/container.serviceAgent
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["gkenode"]:
    condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/container.defaultNodeServiceAgent
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["pubsub"]:
    condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/pubsub.serviceAgent
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["compute.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-ta-app0-be
    service: compute.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["container.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-ta-app0-be
    service: container.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["pubsub.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-ta-app0-be
    service: pubsub.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["stackdriver.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-ta-app0-be
    service: stackdriver.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["storage.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-ta-app0-be
    service: storage.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service_identity.default["container.googleapis.com"]
  : project: test-pf-dev-ta-app0-be
    service: container.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_project_service_identity.default["pubsub.googleapis.com"]:
    project: test-pf-dev-ta-app0-be
    service: pubsub.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_key.default["my-tag-key-1"]:
    allowed_values_regex: null
    description: Managed by the Terraform project-factory module.
    parent: projects/test-pf-dev-ta-app0-be
    purpose: null
    purpose_data: null
    short_name: my-tag-key-1
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_value.default["my-tag-key-1/my-value-1"]:
    description: My value 1
    short_name: my-value-1
    timeouts: null
  module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_value.default["my-tag-key-1/my-value-2"]:
    description: My value 3
    short_name: my-value-2
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-0"].data.google_storage_project_service_account.gcs_sa[0]:
    project: test-pf-dev-tb-app0-0
    user_project: null
  module.project-factory.module.projects["dev-tb-app0-0"].google_essential_contacts_contact.contact["admin@example.org"]:
    email: admin@example.org
    language_tag: en
    notification_category_subscriptions:
    - ALL
    parent: projects/test-pf-dev-tb-app0-0
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-0"].google_project.project[0]:
    auto_create_network: false
    billing_account: 123456-123456-123456
    deletion_policy: DELETE
    effective_labels:
      environment: test
      goog-terraform-provisioned: 'true'
    labels:
      environment: test
    name: test-pf-dev-tb-app0-0
    org_id: null
    project_id: test-pf-dev-tb-app0-0
    tags: null
    terraform_labels:
      environment: test
      goog-terraform-provisioned: 'true'
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-0"].google_project_iam_member.service_agents["serverless-robot-prod"]:
    condition: []
    project: test-pf-dev-tb-app0-0
    role: roles/run.serviceAgent
  module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["run.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-0
    service: run.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["stackdriver.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-0
    service: stackdriver.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["storage.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-0
    service: storage.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-0"].google_project_service_identity.default["run.googleapis.com"]:
    project: test-pf-dev-tb-app0-0
    service: run.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-1"].data.google_storage_project_service_account.gcs_sa[0]:
    project: test-pf-dev-tb-app0-1
    user_project: null
  module.project-factory.module.projects["dev-tb-app0-1"].google_essential_contacts_contact.contact["admin@example.org"]:
    email: admin@example.org
    language_tag: en
    notification_category_subscriptions:
    - ALL
    parent: projects/test-pf-dev-tb-app0-1
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-1"].google_project.project[0]:
    auto_create_network: false
    billing_account: 012345-67890A-BCDEF0
    deletion_policy: DELETE
    effective_labels:
      app: app-0
      environment: test
      goog-terraform-provisioned: 'true'
      team: team-b
    labels:
      app: app-0
      environment: test
      team: team-b
    name: test-pf-dev-tb-app0-1
    org_id: null
    project_id: test-pf-dev-tb-app0-1
    tags: null
    terraform_labels:
      app: app-0
      environment: test
      goog-terraform-provisioned: 'true'
      team: team-b
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-1"].google_project_iam_member.service_agents["container-engine-robot"]:
    condition: []
    project: test-pf-dev-tb-app0-1
    role: roles/container.serviceAgent
  module.project-factory.module.projects["dev-tb-app0-1"].google_project_iam_member.service_agents["gkenode"]:
    condition: []
    project: test-pf-dev-tb-app0-1
    role: roles/container.defaultNodeServiceAgent
  ? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["container.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-1
    service: container.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["stackdriver.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-1
    service: stackdriver.googleapis.com
    timeouts: null
  module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["storage.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-dev-tb-app0-1
    service: storage.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service_identity.default["container.googleapis.com"]
  : project: test-pf-dev-tb-app0-1
    service: container.googleapis.com
    timeouts: null
  module.project-factory.module.projects["teams-iac-0"].data.google_storage_project_service_account.gcs_sa[0]:
    project: test-pf-teams-iac-0
    user_project: null
  module.project-factory.module.projects["teams-iac-0"].google_essential_contacts_contact.contact["admin@example.org"]:
    email: admin@example.org
    language_tag: en
    notification_category_subscriptions:
    - ALL
    parent: projects/test-pf-teams-iac-0
    timeouts: null
  module.project-factory.module.projects["teams-iac-0"].google_iam_workload_identity_pool.default["test-0"]:
    attestation_rules: []
    description: null
    disabled: null
    display_name: Test pool.
    inline_certificate_issuance_config: []
    inline_trust_config: []
    project: test-pf-teams-iac-0
    timeouts: null
    workload_identity_pool_id: test-0
  ? module.project-factory.module.projects["teams-iac-0"].google_iam_workload_identity_pool_provider.default["test-0/github-test"]
  : attribute_condition: attribute.repository_owner=="my_org"
    attribute_mapping:
      attribute.actor: assertion.actor
      attribute.event_name: assertion.event_name
      attribute.fast_sub: '"repo:" + assertion.repository + ":ref:" + assertion.ref'
      attribute.job_workflow_ref: assertion.job_workflow_ref
      attribute.pr_review_sub: '"event:" + assertion.event_name + ":workflow:" + assertion.workflow'
      attribute.ref: assertion.ref
      attribute.repository: assertion.repository
      attribute.repository_owner: assertion.repository_owner
      attribute.sub: assertion.sub
      attribute.workflow: assertion.workflow
      google.subject: assertion.sub
    aws: []
    description: null
    disabled: false
    display_name: GitHub test provider.
    oidc:
    - allowed_audiences: []
      issuer_uri: https://token.actions.githubusercontent.com
      jwks_json: null
    project: test-pf-teams-iac-0
    saml: []
    timeouts: null
    workload_identity_pool_id: test-0
    workload_identity_pool_provider_id: github-test
    x509: []
  module.project-factory.module.projects["teams-iac-0"].google_project.project[0]:
    auto_create_network: false
    billing_account: 012345-67890A-BCDEF0
    deletion_policy: DELETE
    effective_labels:
      environment: test
      goog-terraform-provisioned: 'true'
    folder_id: null
    labels:
      environment: test
    name: test-pf-teams-iac-0
    org_id: null
    project_id: test-pf-teams-iac-0
    tags: null
    terraform_labels:
      environment: test
      goog-terraform-provisioned: 'true'
    timeouts: null
  module.project-factory.module.projects["teams-iac-0"].google_project_iam_member.service_agents["container-engine-robot"]:
    condition: []
    project: test-pf-teams-iac-0
    role: roles/container.serviceAgent
  module.project-factory.module.projects["teams-iac-0"].google_project_iam_member.service_agents["gkenode"]:
    condition: []
    project: test-pf-teams-iac-0
    role: roles/container.defaultNodeServiceAgent
  module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["container.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-teams-iac-0
    service: container.googleapis.com
    timeouts: null
  ? module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["stackdriver.googleapis.com"]
  : disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-teams-iac-0
    service: stackdriver.googleapis.com
    timeouts: null
  module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["storage.googleapis.com"]:
    disable_dependent_services: false
    disable_on_destroy: false
    project: test-pf-teams-iac-0
    service: storage.googleapis.com
    timeouts: null
  module.project-factory.module.projects["teams-iac-0"].google_project_service_identity.default["container.googleapis.com"]:
    project: test-pf-teams-iac-0
    service: container.googleapis.com
    timeouts: null
  module.project-factory.module.pubsub["dev-ta-app0-be/app-0-topic-a"].google_pubsub_topic.default:
    effective_labels:
      goog-terraform-provisioned: 'true'
    ingestion_data_source_settings: []
    kms_key_name: null
    labels: null
    message_retention_duration: null
    message_transforms: []
    name: app-0-topic-a
    project: test-pf-dev-ta-app0-be
    schema_settings: []
    tags: null
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
  ? module.project-factory.module.pubsub["dev-ta-app0-be/app-0-topic-a"].google_pubsub_topic_iam_binding.authoritative["roles/pubsub.subscriber"]
  : condition: []
    members:
    - group:team-a-admins@example.org
    project: test-pf-dev-ta-app0-be
    role: roles/pubsub.subscriber
  ? module.project-factory.module.pubsub["dev-ta-app0-be/app-0-topic-b"].google_pubsub_subscription.default["app-0-topic-b-sub"]
  : bigquery_config: []
    cloud_storage_config: []
    dead_letter_policy: []
    effective_labels:
      goog-terraform-provisioned: 'true'
    enable_exactly_once_delivery: false
    enable_message_ordering: false
    filter: null
    labels: null
    message_retention_duration: 604800s
    message_transforms: []
    name: app-0-topic-b-sub
    project: test-pf-dev-ta-app0-be
    push_config: []
    retain_acked_messages: false
    retry_policy: []
    tags: null
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
  module.project-factory.module.pubsub["dev-ta-app0-be/app-0-topic-b"].google_pubsub_topic.default:
    effective_labels:
      goog-terraform-provisioned: 'true'
    ingestion_data_source_settings: []
    kms_key_name: null
    labels: null
    message_retention_duration: null
    message_transforms: []
    name: app-0-topic-b
    project: test-pf-dev-ta-app0-be
    schema_settings: []
    tags: null
    terraform_labels:
      goog-terraform-provisioned: 'true'
    timeouts: null
  ? module.project-factory.module.service-accounts-iam["dev-ta-app0-be/app-0-be"].google_service_account_iam_binding.authoritative["roles/iam.serviceAccountUser"]
  : condition: []
    role: roles/iam.serviceAccountUser
  ? module.project-factory.module.service-accounts-iam["dev-ta-app0-be/app-0-be"].google_service_account_iam_member.additive["$service_account_ids:_self_/app-0-fe-roles/iam.serviceAccountUser"]
  : condition: []
    role: roles/iam.serviceAccountUser
    service_account_id: projects/test-pf-dev-ta-app0-be/serviceAccounts/app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
  ? module.project-factory.module.service-accounts-iam["dev-ta-app0-be/app-0-be"].google_service_account_iam_member.bindings["test"]
  : condition: []
    member: group:team-a-admins@example.org
    role: roles/iam.serviceAccountUser
  ? module.project-factory.module.service-accounts-iam["dev-tb-app0-0/vm-default"].google_service_account_iam_binding.authoritative["roles/iam.serviceAccountTokenCreator"]
  : condition: []
    members:
    - serviceAccount:dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
    role: roles/iam.serviceAccountTokenCreator
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project_roles["$project_ids:dev-spoke-0-roles/compute.networkUser"]
  : condition: []
    project: $project_ids:dev-spoke-0
    role: roles/compute.networkUser
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project_roles["$project_ids:dev-ta-app0-be-roles/logging.logWriter"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/logging.logWriter
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project_roles["$project_ids:dev-ta-app0-be-roles/monitoring.metricWriter"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/monitoring.metricWriter
  module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_service_account.service_account[0]:
    account_id: app-0-be
    create_ignore_already_exists: null
    description: null
    disabled: false
    display_name: Backend instances.
    email: app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    member: serviceAccount:app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    project: test-pf-dev-ta-app0-be
    timeouts: null
  module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_tags_tag_binding.binding["context"]:
    tag_value: $tag_values:context/project-factory
    timeouts: null
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project_roles["$project_ids:dev-spoke-0-roles/compute.networkUser"]
  : condition: []
    project: $project_ids:dev-spoke-0
    role: roles/compute.networkUser
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project_roles["$project_ids:dev-ta-app0-be-roles/logging.logWriter"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/logging.logWriter
  ? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project_roles["$project_ids:dev-ta-app0-be-roles/monitoring.metricWriter"]
  : condition: []
    project: test-pf-dev-ta-app0-be
    role: roles/monitoring.metricWriter
  module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_service_account.service_account[0]:
    account_id: app-0-fe
    create_ignore_already_exists: null
    description: null
    disabled: false
    display_name: Frontend instances.
    email: app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    member: serviceAccount:app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
    project: test-pf-dev-ta-app0-be
    timeouts: null
  ? module.project-factory.module.service-accounts["dev-tb-app0-0/vm-default"].google_project_iam_member.project_roles["$project_ids:dev-tb-app0-0-roles/logging.logWriter"]
  : condition: []
    project: test-pf-dev-tb-app0-0
    role: roles/logging.logWriter
  ? module.project-factory.module.service-accounts["dev-tb-app0-0/vm-default"].google_project_iam_member.project_roles["$project_ids:dev-tb-app0-0-roles/monitoring.metricWriter"]
  : condition: []
    project: test-pf-dev-tb-app0-0
    role: roles/monitoring.metricWriter
  module.project-factory.module.service-accounts["dev-tb-app0-0/vm-default"].google_service_account.service_account[0]:
    account_id: vm-default
    create_ignore_already_exists: null
    description: null
    disabled: false
    display_name: VM default service account.
    email: vm-default@test-pf-dev-tb-app0-0.iam.gserviceaccount.com
    member: serviceAccount:vm-default@test-pf-dev-tb-app0-0.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-0
    timeouts: null
  ? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project_roles["$project_ids:dev-tb-app0-1-roles/logging.logWriter"]
  : condition: []
    project: test-pf-dev-tb-app0-1
    role: roles/logging.logWriter
  ? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project_roles["$project_ids:dev-tb-app0-1-roles/monitoring.metricWriter"]
  : condition: []
    project: test-pf-dev-tb-app0-1
    role: roles/monitoring.metricWriter
  module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_service_account.service_account[0]:
    account_id: app-0-be
    create_ignore_already_exists: null
    description: null
    disabled: false
    display_name: Backend instances.
    email: app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
    member: serviceAccount:app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
    project: test-pf-dev-tb-app0-1
    timeouts: null
  module.project-factory.module.taxonomies["dev-tb-app0-0"].google_data_catalog_taxonomy.default:
    activated_policy_types:
    - FINE_GRAINED_ACCESS_CONTROL
    description: Taxonomy - Terraform managed
    display_name: taxonomy
    project: test-pf-dev-tb-app0-0
    region: europe-west1
    timeouts: null
  module.project-factory.terraform_data.defaults_preconditions:
    input: null
    output: null
    triggers_replace: null
  module.project-factory.terraform_data.project_preconditions:
    input: null
    output: null
    triggers_replace: null

counts:
  google_bigquery_dataset: 1
  google_bigquery_dataset_iam_binding: 1
  google_billing_budget: 1
  google_cloud_asset_folder_feed: 1
  google_compute_shared_vpc_host_project: 1
  google_compute_shared_vpc_service_project: 1
  google_data_catalog_taxonomy: 1
  google_essential_contacts_contact: 4
  google_folder: 8
  google_folder_iam_audit_config: 1
  google_folder_iam_binding: 1
  google_iam_workload_identity_pool: 1
  google_iam_workload_identity_pool_provider: 1
  google_kms_crypto_key: 1
  google_kms_crypto_key_iam_member: 2
  google_kms_key_ring: 1
  google_monitoring_notification_channel: 1
  google_network_security_dns_threat_detector: 1
  google_org_policy_policy: 3
  google_privileged_access_manager_entitlement: 2
  google_project: 4
  google_project_iam_audit_config: 1
  google_project_iam_binding: 6
  google_project_iam_member: 22
  google_project_service: 14
  google_project_service_identity: 5
  google_pubsub_subscription: 1
  google_pubsub_topic: 2
  google_pubsub_topic_iam_binding: 1
  google_service_account: 6
  google_service_account_iam_binding: 2
  google_service_account_iam_member: 2
  google_storage_bucket: 3
  google_storage_bucket_iam_binding: 2
  google_storage_project_service_account: 4
  google_tags_location_tag_binding: 2
  google_tags_tag_binding: 3
  google_tags_tag_key: 1
  google_tags_tag_value: 2
  google_tags_tag_value_iam_binding: 1
  modules: 38
  resources: 120
  terraform_data: 2

outputs: {}
