Merge remote-tracking branch 'origin/master' into fast-dev

modules/project/assets.tf

@@ -14,6 +14,13 @@
  * limitations under the License.
  */
 
+data "google_cloud_asset_search_all_resources" "default" {
+  for_each    = var.asset_search
+  scope       = "projects/${local.project.project_id}"
+  asset_types = each.value.asset_types
+  query       = each.value.query
+}
+
 resource "google_cloud_asset_project_feed" "default" {
   for_each = var.asset_feeds
   project  = local.project.project_id

modules/project/outputs.tf

@@ -22,6 +22,13 @@ output "alert_ids" {
   }
 }
 
+output "asset_search_results" {
+  description = "Cloud Asset Inventory search results."
+  value = {
+    for k, v in data.google_cloud_asset_search_all_resources.default : k => v.results
+  }
+}
+
 output "bigquery_reservations" {
   description = "BigQuery reservations and assignments."
   value = {

modules/project/variables.tf

@@ -48,6 +48,16 @@ variable "asset_feeds" {
   }
 }
 
+variable "asset_search" {
+  description = "Cloud Asset Inventory search configurations."
+  type = map(object({
+    asset_types = list(string)
+    query       = optional(string)
+  }))
+  default  = {}
+  nullable = false
+}
+
 variable "auto_create_network" {
   description = "Whether to create the default network for the project."
   type        = bool