kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Project factory additions, project module reuse implementation (#2899)

Browse Source 
* add support for buckets

* add project-level interpolation for own SAs

* docs

* project reuse changes

* fix example

* tfdoc

* update check documentation tool

* fast tests

* blueprints

* typo
This commit is contained in:
Ludovico Magnocavallo
2025-02-15 20:37:45 +01:00
committed by GitHub
parent 87383a1569
commit 1a4b298cc9
79 changed files with 628 additions and 379 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
fast/addons/1-resman-tenants/tenant-fast-automation.tf
View File

@@ -88,10 +88,16 @@ module "tenant-automation-project" {
module "tenant-automation-project-iam" {
source = "../../../modules/project"
for_each = local.fast_tenants
name = module.tenant-automation-project[each.key].project_id
project_create = false
source = "../../../modules/project"
for_each = local.fast_tenants
name = module.tenant-automation-project[each.key].project_id
project_reuse = {
use_data_source = false
project_attributes = {
name = module.tenant-automation-project[each.key].name
number = module.tenant-automation-project[each.key].number
}
}
# human (groups) IAM bindings
iam_by_principals = {
(each.value.principals.gcp-devops) = [

8
fast/addons/2-networking-ngfw/main.tf
View File

@@ -22,10 +22,10 @@ locals {
}
module "project" {
source = "../../../modules/project"
count = var._fast_debug.skip_datasources == true ? 0 : 1
name = local.aliased_project_id
project_create = false
source = "../../../modules/project"
count = var._fast_debug.skip_datasources == true ? 0 : 1
name = local.aliased_project_id
project_reuse = {}
service_agents_config = {
services_enabled = [
"networksecurity.googleapis.com"

8
fast/addons/2-networking-swp/main.tf
View File

@@ -36,10 +36,10 @@ locals {
}
module "project" {
source = "../../../modules/project"
count = var._fast_debug.skip_datasources == true ? 0 : 1
name = local.aliased_project_id
project_create = false
source = "../../../modules/project"
count = var._fast_debug.skip_datasources == true ? 0 : 1
name = local.aliased_project_id
project_reuse = {}
service_agents_config = {
services_enabled = [
"networksecurity.googleapis.com"

8
fast/stages/1-resman/tenant-root.tf
View File

@@ -32,10 +32,10 @@ module "root-folder" {
}
module "automation-project" {
source = "../../../modules/project"
count = var.root_node != null ? 1 : 0
name = var.automation.project_id
project_create = false
source = "../../../modules/project"
count = var.root_node != null ? 1 : 0
name = var.automation.project_id
project_reuse = {}
# do not assign tagViewer or tagUser roles here on tag keys and values as
# they are managed authoritatively and will break multitenant stages
tags = merge(local.tags, {

5
fast/stages/2-project-factory/README.md
View File

@@ -370,6 +370,7 @@ The approach is not shown here but reasonably easy to implement. The main projec
| name | description | sensitive | consumers |
|---|---|:---:|---|
| [projects](outputs.tf#L32) | Created projects. | | |
| [service_accounts](outputs.tf#L46) | Created service accounts. | | |
| [buckets](outputs.tf#L32) | Created buckets. | | |
| [projects](outputs.tf#L39) | Created projects. | | |
| [service_accounts](outputs.tf#L53) | Created service accounts. | | |
<!-- END TFDOC -->

11
fast/stages/2-project-factory/outputs.tf
View File

@@ -29,6 +29,13 @@ locals {
}
}
output "buckets" {
description = "Created buckets."
value = {
for k, v in module.projects.buckets : k => v
}
}
output "projects" {
description = "Created projects."
value = {
@@ -47,8 +54,8 @@ output "service_accounts" {
description = "Created service accounts."
value = {
for k, v in module.projects.service_accounts : k => {
email = v.email
iam_emanil = v.iam_email
email = v.email
iam_email = v.iam_email
}
}
}