kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Expose parameters module in org policy variables

Browse Source
This commit is contained in:
Julio Castillo
2025-02-06 15:51:05 +00:00
committed by Julio Castillo
parent e5a5aa0196
commit 68a5a701e7
9 changed files with 48 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
modules/project/organization-policies.tf
View File

@@ -1,5 +1,5 @@
/**
* Copyright 2024 Google LLC
* Copyright 2025 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
@@ -45,6 +45,7 @@ locals {
location = try(r.condition.location, null)
title = try(r.condition.title, null)
}
parameters = try(r.parameters, null)
}
]
}
@@ -89,8 +90,9 @@ resource "google_org_policy_policy" "default" {
for_each = spec.value.rules
iterator = rule
content {
allow_all = try(rule.value.allow.all, false) == true ? "TRUE" : null
deny_all = try(rule.value.deny.all, false) == true ? "TRUE" : null
allow_all = try(rule.value.allow.all, false) == true ? "TRUE" : null
deny_all = try(rule.value.deny.all, false) == true ? "TRUE" : null
parameters = rule.value.parameters
enforce = (
spec.value.is_boolean_policy && rule.value.enforce != null
? upper(tostring(rule.value.enforce))
@@ -127,8 +129,9 @@ resource "google_org_policy_policy" "default" {
for_each = spec.value.rules
iterator = rule
content {
allow_all = try(rule.value.allow.all, false) == true ? "TRUE" : null
deny_all = try(rule.value.deny.all, false) == true ? "TRUE" : null
allow_all = try(rule.value.allow.all, false) == true ? "TRUE" : null
deny_all = try(rule.value.deny.all, false) == true ? "TRUE" : null
parameters = rule.value.parameters
enforce = (
spec.value.is_boolean_policy && rule.value.enforce != null
? upper(tostring(rule.value.enforce))