Essential contacts in schemas, and email context substitutions (#3495)

* modules

* fast

* duplicate diff

* fix contacts in FAST stage 0 datasets, update contacts in YAML schemas

tests/modules/folder/context.tfvars

@@ -10,6 +10,9 @@ context = {
     myrole_one = "organizations/366118655033/roles/myRoleOne"
     myrole_two = "organizations/366118655033/roles/myRoleTwo"
   }
+  email_addresses = {
+    default = "foo@example.com"
+  }
   folder_ids = {
     default = "organizations/1234567890"
   }
@@ -22,6 +25,9 @@ context = {
     "test/one" = "tagValues/1234567890"
   }
 }
+contacts = {
+  "$email_addresses:default" = ["ALL"]
+}
 iam = {
   "$custom_roles:myrole_one" = [
     "$iam_principals:myuser"

tests/modules/folder/context.yaml

@@ -13,6 +13,12 @@
 # limitations under the License.
 
 values:
+  google_essential_contacts_contact.contact["$email_addresses:default"]:
+    email: foo@example.com
+    language_tag: en
+    notification_category_subscriptions:
+    - ALL
+    timeouts: null
   google_folder.folder[0]:
     deletion_protection: false
     display_name: Test Context
@@ -81,10 +87,11 @@ values:
     tag_value: tagValues/1234567890
 
 counts:
+  google_essential_contacts_contact: 1
   google_folder: 1
   google_folder_iam_binding: 4
   google_folder_iam_member: 1
   google_privileged_access_manager_entitlement: 1
   google_tags_tag_binding: 1
   modules: 0
-  resources: 8
+  resources: 9

tests/modules/organization/context.tfvars

@@ -11,6 +11,9 @@ context = {
     myrole_one = "organizations/366118655033/roles/myRoleOne"
     myrole_two = "organizations/366118655033/roles/myRoleTwo"
   }
+  email_addresses = {
+    default = "foo@example.com"
+  }
   iam_principals = {
     mygroup = "group:test-group@example.com"
     mysa    = "serviceAccount:test@test-project.iam.gserviceaccount.com"
@@ -38,6 +41,9 @@ context = {
     "test/one" = "tagValues/1234567890"
   }
 }
+contacts = {
+  "$email_addresses:default" = ["ALL"]
+}
 iam = {
   "$custom_roles:myrole_one" = [
     "$iam_principals:myuser"

tests/modules/organization/context.yaml

@@ -18,6 +18,12 @@ values:
     dataset_id: logs
     project: test-prod-audit-logs-0
     role: roles/bigquery.dataEditor
+  google_essential_contacts_contact.contact["$email_addresses:default"]:
+    email: foo@example.com
+    language_tag: en
+    notification_category_subscriptions:
+    - ALL
+    timeouts: null
   google_logging_organization_settings.default[0]:
     organization: '1234567890'
     storage_location: europe-west8
@@ -198,6 +204,7 @@ values:
 
 counts:
   google_bigquery_dataset_iam_member: 1
+  google_essential_contacts_contact: 1
   google_logging_organization_settings: 1
   google_logging_organization_sink: 5
   google_organization_iam_binding: 4
@@ -212,4 +219,4 @@ counts:
   google_tags_tag_value_iam_binding: 2
   google_tags_tag_value_iam_member: 1
   modules: 0
-  resources: 24
+  resources: 25

tests/modules/project/context.tfvars

@@ -8,6 +8,9 @@ context = {
     myrole_one = "organizations/366118655033/roles/myRoleOne"
     myrole_two = "organizations/366118655033/roles/myRoleTwo"
   }
+  email_addresses = {
+    default = "foo@example.com"
+  }
   folder_ids = {
     "test/prod" = "folders/6789012345"
   }
@@ -32,6 +35,9 @@ context = {
     default = "accessPolicies/888933661165/servicePerimeters/default"
   }
 }
+contacts = {
+  "$email_addresses:default" = ["ALL"]
+}
 parent = "$folder_ids:test/prod"
 iam = {
   "$custom_roles:myrole_one" = [

tests/modules/project/context.yaml

@@ -19,6 +19,12 @@ values:
     deletion_policy: null
     host_project: test-vpc-host
     service_project: my-project
+  google_essential_contacts_contact.contact["$email_addresses:default"]:
+    email: foo@example.com
+    language_tag: en
+    notification_category_subscriptions:
+    - ALL
+    timeouts: null
   google_kms_crypto_key_iam_member.service_agent_cmek["key-0.compute-system"]:
     condition: []
     crypto_key_id: projects/kms-central-prj/locations/europe-west1/keyRings/my-keyring/cryptoKeys/ew1-compute
@@ -174,6 +180,7 @@ values:
 counts:
   google_access_context_manager_service_perimeter_resource: 1
   google_compute_shared_vpc_service_project: 1
+  google_essential_contacts_contact: 1
   google_kms_crypto_key_iam_member: 1
   google_privileged_access_manager_entitlement: 1
   google_project: 1
@@ -186,4 +193,4 @@ counts:
   google_tags_tag_value_iam_binding: 2
   google_tags_tag_value_iam_member: 1
   modules: 0
-  resources: 24
+  resources: 25