kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(project_factory): bucket definition updated due to change on project factory module

Browse Source
This commit is contained in:
Laurent Al Hossri
2025-03-03 13:56:56 +01:00
committed by Wiktor Niesiobędzki
parent 49e211b231
commit 103548a8f3
1 changed files with 11 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
fast/stages/2-project-factory/README.md
View File

@@ -279,7 +279,7 @@ services:
# enable all services used by service accounts in this project
```
Once a controlling project is in place, it can be used in any other project declaration to host service accounts and buckets for automation. The service accounts can be used in IAM bindings in the same file by referring to their name via substitutions, as shown here.
Once a controlling project is in place, it can be used in any other project declaration to host service accounts and bucket for automation. The service accounts can be used in IAM bindings in the same file by referring to their name via substitutions, as shown here.
```yaml
# team or application-level project with automation resources
@@ -304,18 +304,17 @@ automation:
# resulting sa name: xxx-dev-ta-app-0-ro
ro:
description: Read-only automation sa for team a app 0.
buckets:
bucket:
# resulting bucket name: xxx-dev-ta-app-0-state
state:
description: Terraform state bucket for team a app 0.
iam:
# service accounts can use short name substitutions from context
roles/storage.objectCreator:
- rw
roles/storage.objectViewer:
- rw
- ro
- group:devops@example.org
description: Terraform state bucket for team a app 0.
iam:
# service accounts can use short name substitutions from context
roles/storage.objectCreator:
- rw
roles/storage.objectViewer:
- rw
- ro
- group:devops@example.org
```
## Alternative patterns