Refactor vpc-sc support in project module, add support for dry run (#2229)

This commit is contained in:
Ludovico Magnocavallo
2024-04-22 10:28:01 +03:00
committed by GitHub
parent 0454fd681d
commit 309792c559
9 changed files with 162 additions and 65 deletions

View File

@@ -226,20 +226,6 @@ variable "service_encryption_key_ids" {
default = {}
}
# accessPolicies/ACCESS_POLICY_NAME/servicePerimeters/PERIMETER_NAME
variable "service_perimeter_bridges" {
description = "Name of VPC-SC Bridge perimeters to add project into. See comment in the variables file for format."
type = list(string)
default = null
}
# accessPolicies/ACCESS_POLICY_NAME/servicePerimeters/PERIMETER_NAME
variable "service_perimeter_standard" {
description = "Name of VPC-SC Standard perimeter to add project into. See comment in the variables file for format."
type = string
default = null
}
variable "services" {
description = "Service APIs to enable."
type = list(string)
@@ -288,3 +274,13 @@ variable "skip_delete" {
type = bool
default = false
}
variable "vpc_sc" {
description = "VPC-SC configuration for the project, use when `ignore_changes` for resources is set in the VPC-SC module."
type = object({
perimeter_name = string
perimeter_bridges = optional(list(string), [])
is_dry_run = optional(bool, false)
})
default = null
}