Add variable to resman to control top-level folder IAM (#2196)

This commit is contained in:
Julio Castillo
2024-04-04 10:26:35 +02:00
committed by GitHub
parent 33ffe2daa6
commit a9ac0f40cd
12 changed files with 158 additions and 51 deletions

View File

@@ -32,3 +32,37 @@ organization = {
customer_id = "C00000000"
}
prefix = "fast2"
folder_iam = {
data_platform = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
gcve = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
gke = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
sandbox = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
security = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
network = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
teams = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
tenants = {
"roles/owner" = ["user:extra-owner@fast.example.com"]
"roles/browser" = ["user:extra-browser@fast.example.com"]
}
}

View File

@@ -14,7 +14,7 @@
counts:
google_folder: 5
google_folder_iam_binding: 21
google_folder_iam_binding: 25
google_organization_iam_member: 5
google_project_iam_member: 4
google_service_account: 4
@@ -27,4 +27,4 @@ counts:
google_tags_tag_key: 3
google_tags_tag_value: 10
modules: 12
resources: 76
resources: 80