Add new iam_members variable to IAM additive module interfaces (#1589)

* resource management modules

* data catalog policy

* dataproc

* service account

* kms

* net-vpc

* source repository

* dataplex datascan

* service account module variable order

tests/modules/organization/examples/basic.yaml

@@ -25,6 +25,7 @@ values:
         deny_all: null
         enforce: 'TRUE'
         values: []
+    timeouts: null
   module.org.google_org_policy_policy.default["compute.skipDefaultNetworkCreation"]:
     name: organizations/1234567890/policies/compute.skipDefaultNetworkCreation
     parent: organizations/1234567890
@@ -37,6 +38,7 @@ values:
         deny_all: null
         enforce: 'TRUE'
         values: []
+    timeouts: null
   module.org.google_org_policy_policy.default["compute.trustedImageProjects"]:
     name: organizations/1234567890/policies/compute.trustedImageProjects
     parent: organizations/1234567890
@@ -52,6 +54,7 @@ values:
         - allowed_values:
           - projects/my-project
           denied_values: null
+    timeouts: null
   module.org.google_org_policy_policy.default["compute.vmExternalIpAccess"]:
     name: organizations/1234567890/policies/compute.vmExternalIpAccess
     parent: organizations/1234567890
@@ -64,6 +67,20 @@ values:
         deny_all: 'TRUE'
         enforce: null
         values: []
+    timeouts: null
+  module.org.google_org_policy_policy.default["custom.gkeEnableAutoUpgrade"]:
+    name: organizations/1234567890/policies/custom.gkeEnableAutoUpgrade
+    parent: organizations/1234567890
+    spec:
+    - inherit_from_parent: null
+      reset: null
+      rules:
+      - allow_all: null
+        condition: []
+        deny_all: null
+        enforce: 'TRUE'
+        values: []
+    timeouts: null
   module.org.google_org_policy_policy.default["iam.allowedPolicyMemberDomains"]:
     name: organizations/1234567890/policies/iam.allowedPolicyMemberDomains
     parent: organizations/1234567890
@@ -95,6 +112,7 @@ values:
           - C0xxxxxxx
           - C0yyyyyyy
           denied_values: null
+    timeouts: null
   module.org.google_org_policy_policy.default["iam.disableServiceAccountKeyCreation"]:
     name: organizations/1234567890/policies/iam.disableServiceAccountKeyCreation
     parent: organizations/1234567890
@@ -107,6 +125,7 @@ values:
         deny_all: null
         enforce: 'TRUE'
         values: []
+    timeouts: null
   module.org.google_org_policy_policy.default["iam.disableServiceAccountKeyUpload"]:
     name: organizations/1234567890/policies/iam.disableServiceAccountKeyUpload
     parent: organizations/1234567890
@@ -128,6 +147,7 @@ values:
         deny_all: null
         enforce: 'FALSE'
         values: []
+    timeouts: null
   module.org.google_organization_iam_binding.authoritative["roles/owner"]:
     condition: []
     members:
@@ -156,20 +176,34 @@ values:
     member: user:compute@example.org
     org_id: '1234567890'
     role: roles/container.viewer
+  module.org.google_organization_iam_member.members["am1-storage-admin"]:
+    condition: []
+    member: user:am1@example.org
+    org_id: '1234567890'
+    role: roles/storage.admin
   module.org.google_tags_tag_key.default["allowexternal"]:
     description: Allow external identities.
     parent: organizations/1234567890
     purpose: null
     purpose_data: null
     short_name: allowexternal
+    timeouts: null
   module.org.google_tags_tag_value.default["allowexternal/false"]:
+    description: Managed by the Terraform organization module.
     short_name: 'false'
+    timeouts: null
   module.org.google_tags_tag_value.default["allowexternal/true"]:
+    description: Managed by the Terraform organization module.
     short_name: 'true'
+    timeouts: null
 
 counts:
   google_org_policy_policy: 8
   google_organization_iam_binding: 3
-  google_organization_iam_member: 2
+  google_organization_iam_member: 3
   google_tags_tag_key: 1
   google_tags_tag_value: 2
+  modules: 1
+  resources: 17
+
+outputs: {}