v45.0.0
This commit is contained in:
Ludovico Magnocavallo
@@ -1,54 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
data_defaults = {
|
||||
billing_account = "1245-5678-9012"
|
||||
storage_location = "EU"
|
||||
}
|
||||
# make sure the environment label and stackdriver service are always added
|
||||
data_merges = {
|
||||
labels = {
|
||||
environment = "test"
|
||||
}
|
||||
services = [
|
||||
"stackdriver.googleapis.com"
|
||||
]
|
||||
}
|
||||
# always use this contacts and prefix, regardless of what is in the yaml file
|
||||
data_overrides = {
|
||||
contacts = {
|
||||
"admin@example.org" = ["ALL"]
|
||||
}
|
||||
prefix = "test-pf"
|
||||
}
|
||||
# location where the yaml files are read from
|
||||
factories_config = {
|
||||
folders_data_path = "bucket_iam/hierarchy"
|
||||
projects_data_path = "bucket_iam/projects"
|
||||
context = {
|
||||
folder_ids = {
|
||||
default = "folders/5678901234"
|
||||
teams = "folders/5678901234"
|
||||
}
|
||||
iam_principals = {
|
||||
gcp-devops = "group:gcp-devops@example.org"
|
||||
}
|
||||
tag_values = {
|
||||
"org-policies/drs-allow-all" = "tagValues/123456"
|
||||
}
|
||||
vpc_host_projects = {
|
||||
dev-spoke-0 = "test-pf-dev-net-spoke-0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,505 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.buckets["project2/state"].google_storage_bucket.bucket[0]:
|
||||
autoclass: []
|
||||
cors: []
|
||||
custom_placement_config: []
|
||||
default_event_based_hold: null
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
enable_object_retention: null
|
||||
encryption: []
|
||||
force_destroy: false
|
||||
hierarchical_namespace: []
|
||||
labels: null
|
||||
lifecycle_rule: []
|
||||
location: EUROPE-WEST8
|
||||
logging: []
|
||||
name: test-pf-project2-state
|
||||
project: test-pf-project2
|
||||
requester_pays: null
|
||||
retention_policy: []
|
||||
storage_class: STANDARD
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
uniform_bucket_level_access: true
|
||||
versioning:
|
||||
- enabled: false
|
||||
module.buckets["team-a/project1/state"].google_storage_bucket.bucket[0]:
|
||||
autoclass: []
|
||||
cors: []
|
||||
custom_placement_config: []
|
||||
default_event_based_hold: null
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
enable_object_retention: null
|
||||
encryption: []
|
||||
force_destroy: false
|
||||
hierarchical_namespace: []
|
||||
labels: null
|
||||
lifecycle_rule: []
|
||||
location: EUROPE-WEST8
|
||||
logging: []
|
||||
name: test-pf-project1-state
|
||||
project: test-pf-project1
|
||||
requester_pays: null
|
||||
retention_policy: []
|
||||
storage_class: STANDARD
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
uniform_bucket_level_access: true
|
||||
versioning:
|
||||
- enabled: false
|
||||
module.buckets["team-a/project1/state"].google_storage_bucket_iam_binding.authoritative["roles/storage.admin"]:
|
||||
bucket: test-pf-project1-state
|
||||
condition: []
|
||||
members:
|
||||
- serviceAccount:terraform-rw@test-pf-project1.iam.gserviceaccount.com
|
||||
role: roles/storage.admin
|
||||
module.hierarchy-folder-lvl-1["team-a"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team A
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-1["team-a"].google_folder_iam_binding.authoritative["roles/viewer"]:
|
||||
condition: []
|
||||
members:
|
||||
- group:gcp-devops@example.org
|
||||
- group:team-a-admins@example.org
|
||||
role: roles/viewer
|
||||
module.hierarchy-folder-lvl-1["team-b"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team B
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.projects["project2"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-project2
|
||||
timeouts: null
|
||||
module.projects["project2"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-a
|
||||
labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
team: team-a
|
||||
name: test-pf-project2
|
||||
project_id: test-pf-project2
|
||||
tags: null
|
||||
terraform_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-a
|
||||
timeouts: null
|
||||
module.projects["project2"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project2
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["project3"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-top-project3
|
||||
user_project: null
|
||||
module.projects["project3"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-top-project3
|
||||
timeouts: null
|
||||
module.projects["project3"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-top-project3
|
||||
project_id: test-pf-top-project3
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["project3"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-top-project3
|
||||
role: roles/container.serviceAgent
|
||||
module.projects["project3"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-top-project3
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.projects["project3"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-top-project3
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["project3"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-top-project3
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["project3"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-top-project3
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["project3"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-top-project3
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-auto-team-a
|
||||
user_project: null
|
||||
module.projects["team-a/automation"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-auto-team-a
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-auto-team-a
|
||||
project_id: test-pf-auto-team-a
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-auto-team-a
|
||||
role: roles/container.serviceAgent
|
||||
module.projects["team-a/automation"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-auto-team-a
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.projects["team-a/automation"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-a
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-a
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-a
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/automation"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-auto-team-a
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-project1
|
||||
user_project: null
|
||||
module.projects["team-a/project1"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-project1
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-project1
|
||||
project_id: test-pf-project1
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-project1
|
||||
role: roles/container.serviceAgent
|
||||
module.projects["team-a/project1"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-project1
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.projects["team-a/project1"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project1
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project1
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project1
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-a/project1"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-project1
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-auto-team-b
|
||||
user_project: null
|
||||
module.projects["team-b/automation"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-auto-team-b
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-auto-team-b
|
||||
project_id: test-pf-auto-team-b
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-auto-team-b
|
||||
role: roles/container.serviceAgent
|
||||
module.projects["team-b/automation"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-auto-team-b
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.projects["team-b/automation"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-b
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-b
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-auto-team-b
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/automation"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-auto-team-b
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-project3
|
||||
user_project: null
|
||||
module.projects["team-b/project3"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-project3
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-project3
|
||||
project_id: test-pf-project3
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-project3
|
||||
role: roles/container.serviceAgent
|
||||
module.projects["team-b/project3"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-project3
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.projects["team-b/project3"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project3
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project3
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-project3
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["team-b/project3"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-project3
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.service-accounts["project2/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@test-pf-project2.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@test-pf-project2.iam.gserviceaccount.com
|
||||
project: test-pf-project2
|
||||
timeouts: null
|
||||
? module.service-accounts["project2/app-fe-1"].google_project_iam_member.project-roles["my-host-project-roles/compute.networkUser"]
|
||||
: condition: []
|
||||
project: my-host-project
|
||||
role: roles/compute.networkUser
|
||||
? module.service-accounts["project2/app-fe-1"].google_project_iam_member.project-roles["test-pf-project2-roles/storage.objectViewer"]
|
||||
: condition: []
|
||||
project: test-pf-project2
|
||||
role: roles/storage.objectViewer
|
||||
module.service-accounts["project2/app-fe-1"].google_service_account.service_account[0]:
|
||||
account_id: app-fe-1
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: GCE frontend service account.
|
||||
email: app-fe-1@test-pf-project2.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-fe-1@test-pf-project2.iam.gserviceaccount.com
|
||||
project: test-pf-project2
|
||||
timeouts: null
|
||||
module.service-accounts["project2/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@test-pf-project2.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@test-pf-project2.iam.gserviceaccount.com
|
||||
project: test-pf-project2
|
||||
timeouts: null
|
||||
module.service-accounts["team-a/project1/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@test-pf-project1.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@test-pf-project1.iam.gserviceaccount.com
|
||||
project: test-pf-project1
|
||||
timeouts: null
|
||||
? module.service-accounts["team-a/project1/app-fe-1"].google_project_iam_member.project-roles["my-host-project-roles/compute.networkUser"]
|
||||
: condition: []
|
||||
project: my-host-project
|
||||
role: roles/compute.networkUser
|
||||
? module.service-accounts["team-a/project1/app-fe-1"].google_project_iam_member.project-roles["test-pf-project1-roles/storage.objectViewer"]
|
||||
: condition: []
|
||||
project: test-pf-project1
|
||||
role: roles/storage.objectViewer
|
||||
module.service-accounts["team-a/project1/app-fe-1"].google_service_account.service_account[0]:
|
||||
account_id: app-fe-1
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: GCE frontend service account.
|
||||
email: app-fe-1@test-pf-project1.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-fe-1@test-pf-project1.iam.gserviceaccount.com
|
||||
project: test-pf-project1
|
||||
timeouts: null
|
||||
module.service-accounts["team-a/project1/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@test-pf-project1.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@test-pf-project1.iam.gserviceaccount.com
|
||||
project: test-pf-project1
|
||||
timeouts: null
|
||||
|
||||
counts:
|
||||
google_essential_contacts_contact: 6
|
||||
google_folder: 2
|
||||
google_folder_iam_binding: 1
|
||||
google_project: 6
|
||||
google_project_iam_member: 14
|
||||
google_project_service: 16
|
||||
google_project_service_identity: 5
|
||||
google_service_account: 6
|
||||
google_storage_bucket: 2
|
||||
google_storage_bucket_iam_binding: 1
|
||||
google_storage_project_service_account: 5
|
||||
modules: 16
|
||||
resources: 64
|
||||
|
||||
outputs:
|
||||
buckets:
|
||||
project2/state: test-pf-project2-state
|
||||
team-a/project1/state: test-pf-project1-state
|
||||
folders: __missing__
|
||||
projects: __missing__
|
||||
service_accounts: __missing__
|
||||
@@ -1,20 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
name: Team A
|
||||
# implicit parent definition via 'default' key
|
||||
iam:
|
||||
roles/viewer:
|
||||
- group:team-a-admins@example.org
|
||||
- gcp-devops
|
||||
@@ -1,20 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- container.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
name: auto-team-a
|
||||
@@ -1,35 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- container.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
service_accounts:
|
||||
app-be-0: {}
|
||||
app-fe-1:
|
||||
display_name: GCE frontend service account.
|
||||
iam_self_roles:
|
||||
- roles/storage.objectViewer
|
||||
iam_project_roles:
|
||||
my-host-project:
|
||||
- roles/compute.networkUser
|
||||
terraform-rw: {}
|
||||
buckets:
|
||||
state:
|
||||
location: europe-west8
|
||||
iam:
|
||||
roles/storage.admin:
|
||||
- terraform-rw
|
||||
@@ -1,15 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
name: Team B
|
||||
@@ -1,20 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- container.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
name: auto-team-b
|
||||
@@ -1,20 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- container.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
prefix: team-b
|
||||
@@ -1,36 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
labels:
|
||||
app: app-0
|
||||
team: team-a
|
||||
parent: team-a
|
||||
buckets:
|
||||
state:
|
||||
location: europe-west8
|
||||
# iam:
|
||||
# roles/storage.admin:
|
||||
# - terraform-rw
|
||||
|
||||
service_accounts:
|
||||
app-be-0: {}
|
||||
app-fe-1:
|
||||
display_name: GCE frontend service account.
|
||||
iam_self_roles:
|
||||
- roles/storage.objectViewer
|
||||
iam_project_roles:
|
||||
my-host-project:
|
||||
- roles/compute.networkUser
|
||||
terraform-rw: {}
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- container.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
name: top-project3
|
||||
parent: team-b
|
||||
@@ -1,25 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
|
||||
contacts: # this should be overridden by value
|
||||
admin-default@example.org:
|
||||
- "ALL"
|
||||
|
||||
tag_bindings: # this should be overridden with empty value
|
||||
name1: project_id1
|
||||
|
||||
services:
|
||||
- run.googleapis.com
|
||||
@@ -1,17 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
|
||||
# take defaults + overrides only
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../schemas/folder.schema.json
|
||||
|
||||
name: Team A
|
||||
parent: teams
|
||||
# iam_by_principals:
|
||||
# "group:team-a-admins@example.com":
|
||||
# - roles/viewer
|
||||
@@ -1,22 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../schemas/folder.schema.json
|
||||
|
||||
name: Development
|
||||
tag_bindings:
|
||||
environment: environment/development
|
||||
# iam_by_principals:
|
||||
# "group:team-a-admins@example.com":
|
||||
# - roles/editor
|
||||
@@ -1,19 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../schemas/folder.schema.json
|
||||
|
||||
name: Production
|
||||
tag_bindings:
|
||||
environment: environment/production
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../schemas/folder.schema.json
|
||||
|
||||
name: Team B
|
||||
parent: teams
|
||||
# iam_by_principals:
|
||||
# "group:team-b-admins@example.com":
|
||||
# - roles/viewer
|
||||
@@ -1,22 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../schemas/folder.schema.json
|
||||
|
||||
name: Development
|
||||
tag_bindings:
|
||||
environment: environment/development
|
||||
# iam_by_principals:
|
||||
# "group:team-b-admins@example.com":
|
||||
# - roles/editor
|
||||
@@ -1,19 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../schemas/folder.schema.json
|
||||
|
||||
name: Production
|
||||
tag_bindings:
|
||||
environment: environment/production
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../../../modules/project-factory/schemas/project.schema.json
|
||||
|
||||
parent: team-b/dev
|
||||
shared_vpc_service_config:
|
||||
host_project: dev-spoke-0
|
||||
network_users:
|
||||
- gcp-devops
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../../../modules/project-factory/schemas/project.schema.json
|
||||
|
||||
parent: team-b/prod
|
||||
shared_vpc_service_config:
|
||||
host_project: prod-spoke-0
|
||||
network_users:
|
||||
- gcp-devops
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../../../../modules/project-factory/schemas/project.schema.json
|
||||
|
||||
parent: team-a/dev
|
||||
shared_vpc_service_config:
|
||||
host_project: dev-spoke-0
|
||||
network_users:
|
||||
- gcp-devops
|
||||
@@ -1,21 +0,0 @@
|
||||
# Copyright 2024 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
# yaml-language-server: $schema=../../../../../../../modules/project-factory/schemas/project.schema.json
|
||||
|
||||
parent: team-a/prod
|
||||
shared_vpc_service_config:
|
||||
host_project: prod-spoke-0
|
||||
network_users:
|
||||
- gcp-devops
|
||||
@@ -1,35 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
|
||||
service_accounts:
|
||||
app-be-0: {}
|
||||
terraform-rw: {}
|
||||
|
||||
automation:
|
||||
project: service-iac
|
||||
service_accounts:
|
||||
rw:
|
||||
description: Service read/write automation sa.
|
||||
ro:
|
||||
description: Service read-only automation sa.
|
||||
|
||||
|
||||
shared_vpc_service_config:
|
||||
host_project: dev-spoke-0
|
||||
network_users:
|
||||
- terraform-rw
|
||||
- ro
|
||||
- rw
|
||||
@@ -1,22 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
services:
|
||||
- compute.googleapis.com
|
||||
- storage.googleapis.com
|
||||
|
||||
service_accounts:
|
||||
app-be-0: {}
|
||||
terraform-rw: {}
|
||||
@@ -1,51 +0,0 @@
|
||||
data_defaults = {
|
||||
billing_account = "1245-5678-9012"
|
||||
parent = "folders/1234"
|
||||
storage_location = "EU"
|
||||
contacts = {
|
||||
"admin-default@example.org" = ["ALL"] # should not surface, as overrides provide value
|
||||
}
|
||||
tag_bindings = { # should not surface, as overrides provide empty value
|
||||
name1 = "default-id1"
|
||||
name2 = "default-id2"
|
||||
}
|
||||
services = [
|
||||
"default-service.googleapis.com"
|
||||
]
|
||||
}
|
||||
# make sure the environment label and stackdriver service are always added
|
||||
data_merges = {
|
||||
labels = {
|
||||
environment = "test"
|
||||
}
|
||||
services = [
|
||||
"stackdriver.googleapis.com"
|
||||
]
|
||||
}
|
||||
# always use this contacts and prefix, regardless of what is in the yaml file
|
||||
data_overrides = {
|
||||
contacts = {
|
||||
"admin@example.org" = ["ALL"]
|
||||
}
|
||||
tag_bindings = {} # prevent setting any encryption keys
|
||||
prefix = "test-pf"
|
||||
}
|
||||
# location where the yaml files are read from
|
||||
factories_config = {
|
||||
projects_data_path = "projects"
|
||||
context = {
|
||||
folder_ids = {
|
||||
default = "folders/5678901234"
|
||||
teams = "folders/5678901234"
|
||||
}
|
||||
iam_principals = {
|
||||
gcp-devops = "group:gcp-devops@example.org"
|
||||
}
|
||||
tag_values = {
|
||||
"org-policies/drs-allow-all" = "tagValues/123456"
|
||||
}
|
||||
vpc_host_projects = {
|
||||
dev-spoke-0 = "test-pf-dev-net-spoke-0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,63 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.projects["service1"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
parent: projects/test-pf-service1
|
||||
module.projects["service1"].google_project.project[0]:
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
folder_id: '1234'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-service1
|
||||
project_id: test-pf-service1
|
||||
module.projects["service1"].google_project_service.project_services["run.googleapis.com"]:
|
||||
project: test-pf-service1
|
||||
service: run.googleapis.com
|
||||
module.projects["service1"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
project: test-pf-service1
|
||||
service: stackdriver.googleapis.com
|
||||
module.projects["service2"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
parent: projects/test-pf-service2
|
||||
module.projects["service2"].google_project.project[0]:
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
folder_id: '1234'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-service2
|
||||
project_id: test-pf-service2
|
||||
module.projects["service2"].google_project_service.project_services["default-service.googleapis.com"]:
|
||||
project: test-pf-service2
|
||||
service: default-service.googleapis.com
|
||||
module.projects["service2"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
project: test-pf-service2
|
||||
service: stackdriver.googleapis.com
|
||||
|
||||
counts:
|
||||
google_essential_contacts_contact: 2
|
||||
google_project: 2
|
||||
google_project_iam_member: 1
|
||||
google_project_service: 4
|
||||
google_project_service_identity: 1
|
||||
google_tags_tag_binding: 0 # keep this, to ensure that tag_bindings are not created
|
||||
modules: 2
|
||||
resources: 10
|
||||
|
||||
outputs:
|
||||
buckets: {}
|
||||
folders: {}
|
||||
projects: __missing__
|
||||
service_accounts: {}
|
||||
@@ -1,42 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
data_defaults = {
|
||||
billing_account = "1245-5678-9012"
|
||||
storage_location = "EU"
|
||||
prefix = "my-prefix"
|
||||
parent = "folders/1234"
|
||||
shared_vpc_service_config = null
|
||||
}
|
||||
data_merges = {
|
||||
services = [
|
||||
"stackdriver.googleapis.com"
|
||||
]
|
||||
}
|
||||
data_overrides = {
|
||||
prefix = "myprefix"
|
||||
}
|
||||
# location where the yaml files are read from
|
||||
factories_config = {
|
||||
projects_data_path = "projects"
|
||||
context = {
|
||||
folder_ids = {
|
||||
default = "folders/5678901234"
|
||||
teams = "folders/4321056789"
|
||||
}
|
||||
vpc_host_projects = {
|
||||
dev-spoke-0 = "test-pf-dev-net-spoke-0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,173 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.automation-service-accounts["service1/ro"].google_service_account.service_account[0]:
|
||||
account_id: myprefix-service1-ro
|
||||
create_ignore_already_exists: null
|
||||
description: Service read-only automation sa.
|
||||
disabled: false
|
||||
display_name: Service account ro for service1.
|
||||
email: myprefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
member: serviceAccount:myprefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
project: service-iac
|
||||
timeouts: null
|
||||
module.automation-service-accounts["service1/rw"].google_service_account.service_account[0]:
|
||||
account_id: myprefix-service1-rw
|
||||
create_ignore_already_exists: null
|
||||
description: Service read/write automation sa.
|
||||
disabled: false
|
||||
display_name: Service account rw for service1.
|
||||
email: myprefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
member: serviceAccount:myprefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
project: service-iac
|
||||
timeouts: null
|
||||
module.projects-iam["service1"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: test-pf-dev-net-spoke-0
|
||||
service_project: myprefix-service1
|
||||
timeouts: null
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:myprefix-service1-ro@service-iac.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:myprefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:myprefix-service1-rw@service-iac.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:myprefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:terraform-rw@myprefix-service1.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:terraform-rw@myprefix-service1.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects["service1"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
folder_id: '1234'
|
||||
labels: null
|
||||
name: myprefix-service1
|
||||
org_id: null
|
||||
project_id: myprefix-service1
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["service1"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: myprefix-service1
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["service2"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: myprefix-service2
|
||||
user_project: null
|
||||
module.projects["service2"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
folder_id: '1234'
|
||||
labels: null
|
||||
name: myprefix-service2
|
||||
org_id: null
|
||||
project_id: myprefix-service2
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["service2"].google_project_iam_member.service_agents["compute-system"]:
|
||||
condition: []
|
||||
project: myprefix-service2
|
||||
role: roles/compute.serviceAgent
|
||||
module.projects["service2"].google_project_service.project_services["compute.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: myprefix-service2
|
||||
service: compute.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["service2"].google_project_service.project_services["stackdriver.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: myprefix-service2
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["service2"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: myprefix-service2
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.service-accounts["service1/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@myprefix-service1.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@myprefix-service1.iam.gserviceaccount.com
|
||||
project: myprefix-service1
|
||||
timeouts: null
|
||||
module.service-accounts["service1/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@myprefix-service1.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@myprefix-service1.iam.gserviceaccount.com
|
||||
project: myprefix-service1
|
||||
timeouts: null
|
||||
module.service-accounts["service2/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@myprefix-service2.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@myprefix-service2.iam.gserviceaccount.com
|
||||
project: myprefix-service2
|
||||
timeouts: null
|
||||
module.service-accounts["service2/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@myprefix-service2.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@myprefix-service2.iam.gserviceaccount.com
|
||||
project: myprefix-service2
|
||||
timeouts: null
|
||||
|
||||
counts:
|
||||
google_compute_shared_vpc_service_project: 1
|
||||
google_project: 2
|
||||
google_project_iam_member: 4
|
||||
google_project_service: 4
|
||||
google_service_account: 6
|
||||
google_storage_project_service_account: 1
|
||||
modules: 9
|
||||
resources: 18
|
||||
|
||||
outputs:
|
||||
buckets: {}
|
||||
folders: {}
|
||||
foo: {}
|
||||
projects: __missing__
|
||||
service_accounts: __missing__
|
||||
@@ -1,571 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.project-factory.module.automation-bucket["dev-tb-app0-0"].google_storage_bucket.bucket[0]:
|
||||
autoclass: []
|
||||
cors: []
|
||||
custom_placement_config: []
|
||||
default_event_based_hold: null
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
enable_object_retention: null
|
||||
encryption: []
|
||||
force_destroy: false
|
||||
hierarchical_namespace: []
|
||||
labels: null
|
||||
lifecycle_rule: []
|
||||
location: EU
|
||||
logging: []
|
||||
name: test-pf-dev-tb-app0-0-tf-state
|
||||
project: test-pf-teams-iac-0
|
||||
requester_pays: null
|
||||
retention_policy: []
|
||||
storage_class: STANDARD
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
uniform_bucket_level_access: true
|
||||
versioning:
|
||||
- enabled: false
|
||||
? module.project-factory.module.automation-bucket["dev-tb-app0-0"].google_storage_bucket_iam_binding.authoritative["roles/storage.objectCreator"]
|
||||
: bucket: test-pf-dev-tb-app0-0-tf-state
|
||||
condition: []
|
||||
members:
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
role: roles/storage.objectCreator
|
||||
? module.project-factory.module.automation-bucket["dev-tb-app0-0"].google_storage_bucket_iam_binding.authoritative["roles/storage.objectViewer"]
|
||||
: bucket: test-pf-dev-tb-app0-0-tf-state
|
||||
condition: []
|
||||
members:
|
||||
- group:gcp-devops@example.org
|
||||
- group:team-b-admins@example.org
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
role: roles/storage.objectViewer
|
||||
? module.project-factory.module.automation-service-accounts["dev-tb-app0-0/automation/ro"].google_service_account.service_account[0]
|
||||
: account_id: test-pf-dev-tb-app0-0-ro
|
||||
create_ignore_already_exists: null
|
||||
description: Team B app 0 read-only automation sa.
|
||||
disabled: false
|
||||
display_name: Service account ro for dev-tb-app0-0.
|
||||
email: test-pf-dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
member: serviceAccount:test-pf-dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
project: test-pf-teams-iac-0
|
||||
timeouts: null
|
||||
? module.project-factory.module.automation-service-accounts["dev-tb-app0-0/automation/rw"].google_service_account.service_account[0]
|
||||
: account_id: test-pf-dev-tb-app0-0-rw
|
||||
create_ignore_already_exists: null
|
||||
description: Team B app 0 read/write automation sa.
|
||||
disabled: false
|
||||
display_name: Service account rw for dev-tb-app0-0.
|
||||
email: test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
member: serviceAccount:test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
project: test-pf-teams-iac-0
|
||||
timeouts: null
|
||||
module.project-factory.module.billing-account[0].google_billing_budget.default["test-100"]:
|
||||
all_updates_rule:
|
||||
- disable_default_iam_recipients: true
|
||||
enable_project_level_recipients: false
|
||||
pubsub_topic: null
|
||||
schema_version: '1.0'
|
||||
amount:
|
||||
- last_period_amount: null
|
||||
specified_amount:
|
||||
- nanos: null
|
||||
units: '100'
|
||||
billing_account: 123456-123456-123456
|
||||
budget_filter:
|
||||
- calendar_period: null
|
||||
credit_types_treatment: INCLUDE_ALL_CREDITS
|
||||
custom_period: []
|
||||
resource_ancestors:
|
||||
- folders/1234567890
|
||||
display_name: 100 dollars in current spend
|
||||
ownership_scope: null
|
||||
threshold_rules:
|
||||
- spend_basis: CURRENT_SPEND
|
||||
threshold_percent: 0.5
|
||||
- spend_basis: CURRENT_SPEND
|
||||
threshold_percent: 0.75
|
||||
timeouts: null
|
||||
module.project-factory.module.billing-account[0].google_monitoring_notification_channel.default["billing-default"]:
|
||||
description: null
|
||||
display_name: Budget email notification billing-default.
|
||||
enabled: true
|
||||
force_delete: false
|
||||
labels:
|
||||
email_address: gcp-billing-admins@example.org
|
||||
project: foo-billing-audit
|
||||
sensitive_labels: []
|
||||
timeouts: null
|
||||
type: email
|
||||
user_labels: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-1["team-a"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team A
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-1["team-a"].google_folder_iam_binding.authoritative["roles/viewer"]:
|
||||
condition: []
|
||||
members:
|
||||
- group:gcp-devops@example.org
|
||||
- group:team-a-admins@example.org
|
||||
role: roles/viewer
|
||||
module.project-factory.module.hierarchy-folder-lvl-1["team-b"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team B
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-1["team-c"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team C
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-2["team-a/app-0"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: App 0
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-2["team-b/app-0"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: App 0
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.project-factory.module.hierarchy-folder-lvl-2["team-b/app-0"].google_tags_tag_binding.binding["drs-allow-all"]:
|
||||
tag_value: tagValues/123456
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_compute_shared_vpc_service_project.shared_vpc_service[0]
|
||||
: deletion_policy: null
|
||||
host_project: test-pf-dev-net-spoke-0
|
||||
service_project: test-pf-dev-ta-app0-be
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_iam["group:gcp-devops@example.org"]
|
||||
: condition: []
|
||||
member: group:gcp-devops@example.org
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_robots["roles/compute.networkUser:container-engine"]
|
||||
: condition: []
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.project-factory.module.projects-iam["dev-ta-app0-be"].google_project_iam_member.shared_vpc_host_robots["roles/container.hostServiceAgentUser:container-engine"]
|
||||
: condition: []
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/container.hostServiceAgentUser
|
||||
module.project-factory.module.projects-iam["dev-tb-app0-0"].google_project_iam_binding.authoritative["roles/owner"]:
|
||||
condition: []
|
||||
members:
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-0
|
||||
role: roles/owner
|
||||
module.project-factory.module.projects-iam["dev-tb-app0-0"].google_project_iam_binding.authoritative["roles/viewer"]:
|
||||
condition: []
|
||||
members:
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-ro@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-0
|
||||
role: roles/viewer
|
||||
module.project-factory.module.projects-iam["dev-tb-app0-1"].google_project_iam_binding.authoritative["roles/run.admin"]:
|
||||
condition: []
|
||||
members:
|
||||
- serviceAccount:app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/run.admin
|
||||
? module.project-factory.module.projects-iam["dev-tb-app0-1"].google_project_iam_binding.authoritative["roles/run.developer"]
|
||||
: condition: []
|
||||
members:
|
||||
- serviceAccount:app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/run.developer
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-dev-ta-app0-be
|
||||
user_project: null
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-dev-ta-app0-be
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_kms_crypto_key_iam_member.service_agent_cmek["key-0.compute-system"]
|
||||
: condition: []
|
||||
crypto_key_id: projects/kms-central-prj/locations/europe-west1/keyRings/my-keyring/cryptoKeys/ew1-compute
|
||||
role: roles/cloudkms.cryptoKeyEncrypterDecrypter
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_kms_crypto_key_iam_member.service_agent_cmek["key-0.gs-project-accounts"]
|
||||
: condition: []
|
||||
crypto_key_id: projects/kms-central-prj/locations/europe-west3/keyRings/my-keyring/cryptoKeys/europe3-gce
|
||||
role: roles/cloudkms.cryptoKeyEncrypterDecrypter
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-a
|
||||
labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
team: team-a
|
||||
name: test-pf-dev-ta-app0-be
|
||||
project_id: test-pf-dev-ta-app0-be
|
||||
tags: null
|
||||
terraform_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-a
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["container-engine-robot"]
|
||||
: condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/container.serviceAgent
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["container.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-ta-app0-be
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["stackdriver.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-ta-app0-be
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-ta-app0-be
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_project_service_identity.default["container.googleapis.com"]
|
||||
: project: test-pf-dev-ta-app0-be
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_key.default["my-tag-key-1"]:
|
||||
description: Managed by the Terraform project-factory module.
|
||||
parent: projects/test-pf-dev-ta-app0-be
|
||||
purpose: null
|
||||
purpose_data: null
|
||||
short_name: my-tag-key-1
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_value.default["my-tag-key-1/my-value-1"]:
|
||||
description: My value 1
|
||||
short_name: my-value-1
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_value.default["my-tag-key-1/my-value-2"]:
|
||||
description: My value 3
|
||||
short_name: my-value-2
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-ta-app0-be"].google_tags_tag_value_iam_binding.default["my-tag-key-1/my-value-2:roles/resourcemanager.tagUser"]
|
||||
: condition: []
|
||||
members:
|
||||
- user:user@example.com
|
||||
role: roles/resourcemanager.tagUser
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-dev-tb-app0-0
|
||||
user_project: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_compute_shared_vpc_host_project.shared_vpc_host[0]:
|
||||
project: test-pf-dev-tb-app0-0
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-dev-tb-app0-0
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 123456-123456-123456
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-dev-tb-app0-0
|
||||
project_id: test-pf-dev-tb-app0-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_project_iam_member.service_agents["serverless-robot-prod"]:
|
||||
condition: []
|
||||
project: test-pf-dev-tb-app0-0
|
||||
role: roles/run.serviceAgent
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["run.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-0
|
||||
service: run.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["stackdriver.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-0
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-0
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-0"].google_project_service_identity.default["run.googleapis.com"]:
|
||||
project: test-pf-dev-tb-app0-0
|
||||
service: run.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-dev-tb-app0-1
|
||||
user_project: null
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-dev-tb-app0-1
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-b
|
||||
labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
team: team-b
|
||||
name: test-pf-dev-tb-app0-1
|
||||
project_id: test-pf-dev-tb-app0-1
|
||||
tags: null
|
||||
terraform_labels:
|
||||
app: app-0
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
team: team-b
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/container.serviceAgent
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["container.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-1
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["stackdriver.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-1
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["dev-tb-app0-1"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-app0-1
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["dev-tb-app0-1"].google_project_service_identity.default["container.googleapis.com"]
|
||||
: project: test-pf-dev-tb-app0-1
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["teams-iac-0"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: test-pf-teams-iac-0
|
||||
user_project: null
|
||||
module.project-factory.module.projects["teams-iac-0"].google_essential_contacts_contact.contact["admin@example.org"]:
|
||||
email: admin@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-teams-iac-0
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
folder_id: '5678901234'
|
||||
labels:
|
||||
environment: test
|
||||
name: test-pf-teams-iac-0
|
||||
org_id: null
|
||||
project_id: test-pf-teams-iac-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
environment: test
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project_iam_member.service_agents["container-engine-robot"]:
|
||||
condition: []
|
||||
project: test-pf-teams-iac-0
|
||||
role: roles/container.serviceAgent
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project_iam_member.service_agents["gkenode"]:
|
||||
condition: []
|
||||
project: test-pf-teams-iac-0
|
||||
role: roles/container.defaultNodeServiceAgent
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["container.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-teams-iac-0
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["stackdriver.googleapis.com"]
|
||||
: disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-teams-iac-0
|
||||
service: stackdriver.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-teams-iac-0
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.project-factory.module.projects["teams-iac-0"].google_project_service_identity.default["container.googleapis.com"]:
|
||||
project: test-pf-teams-iac-0
|
||||
service: container.googleapis.com
|
||||
timeouts: null
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-net-spoke-0-roles/compute.networkUser"]
|
||||
: condition: []
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-ta-app0-be-roles/logging.logWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/logging.logWriter
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-ta-app0-be-roles/monitoring.metricWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/monitoring.metricWriter
|
||||
module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-be"].google_service_account.service_account[0]:
|
||||
account_id: app-0-be
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Backend instances.
|
||||
email: app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-0-be@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
|
||||
project: test-pf-dev-ta-app0-be
|
||||
timeouts: null
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project-roles["test-pf-dev-net-spoke-0-roles/compute.networkUser"]
|
||||
: condition: []
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project-roles["test-pf-dev-ta-app0-be-roles/logging.logWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/logging.logWriter
|
||||
? module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_project_iam_member.project-roles["test-pf-dev-ta-app0-be-roles/monitoring.metricWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-ta-app0-be
|
||||
role: roles/monitoring.metricWriter
|
||||
module.project-factory.module.service-accounts["dev-ta-app0-be/app-0-fe"].google_service_account.service_account[0]:
|
||||
account_id: app-0-fe
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Frontend instances.
|
||||
email: app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-0-fe@test-pf-dev-ta-app0-be.iam.gserviceaccount.com
|
||||
project: test-pf-dev-ta-app0-be
|
||||
timeouts: null
|
||||
? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-tb-app0-1-roles/logging.logWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/logging.logWriter
|
||||
? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-tb-app0-1-roles/monitoring.metricWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/monitoring.metricWriter
|
||||
module.project-factory.module.service-accounts["dev-tb-app0-0/vm-default"].google_service_account.service_account[0]:
|
||||
account_id: vm-default
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: VM default service account.
|
||||
email: vm-default@test-pf-dev-tb-app0-0.iam.gserviceaccount.com
|
||||
member: serviceAccount:vm-default@test-pf-dev-tb-app0-0.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-0
|
||||
timeouts: null
|
||||
? module.project-factory.module.service-accounts["dev-tb-app0-0/vm-default"].google_service_account_iam_binding.authoritative["roles/iam.serviceAccountTokenCreator"]
|
||||
: condition: []
|
||||
members:
|
||||
- serviceAccount:test-pf-dev-tb-app0-0-rw@test-pf-teams-iac-0.iam.gserviceaccount.com
|
||||
role: roles/iam.serviceAccountTokenCreator
|
||||
? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-tb-app0-1-roles/logging.logWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/logging.logWriter
|
||||
? module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_project_iam_member.project-roles["test-pf-dev-tb-app0-1-roles/monitoring.metricWriter"]
|
||||
: condition: []
|
||||
project: test-pf-dev-tb-app0-1
|
||||
role: roles/monitoring.metricWriter
|
||||
module.project-factory.module.service-accounts["dev-tb-app0-1/app-0-be"].google_service_account.service_account[0]:
|
||||
account_id: app-0-be
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Backend instances.
|
||||
email: app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-0-be@test-pf-dev-tb-app0-1.iam.gserviceaccount.com
|
||||
project: test-pf-dev-tb-app0-1
|
||||
timeouts: null
|
||||
|
||||
counts:
|
||||
google_billing_budget: 1
|
||||
google_compute_shared_vpc_host_project: 1
|
||||
google_compute_shared_vpc_service_project: 1
|
||||
google_essential_contacts_contact: 4
|
||||
google_folder: 5
|
||||
google_folder_iam_binding: 1
|
||||
google_kms_crypto_key_iam_member: 2
|
||||
google_monitoring_notification_channel: 1
|
||||
google_project: 4
|
||||
google_project_iam_binding: 6
|
||||
google_project_iam_member: 21
|
||||
google_project_service: 13
|
||||
google_project_service_identity: 4
|
||||
google_service_account: 6
|
||||
google_service_account_iam_binding: 1
|
||||
google_storage_bucket: 1
|
||||
google_storage_bucket_iam_binding: 2
|
||||
google_storage_project_service_account: 4
|
||||
google_tags_tag_binding: 1
|
||||
google_tags_tag_key: 1
|
||||
google_tags_tag_value: 2
|
||||
google_tags_tag_value_iam_binding: 1
|
||||
modules: 21
|
||||
resources: 83
|
||||
|
||||
outputs: {}
|
||||
@@ -1,40 +0,0 @@
|
||||
data_defaults = {
|
||||
billing_account = "1245-5678-9012"
|
||||
parent = "folders/1234"
|
||||
storage_location = "EU"
|
||||
contacts = {
|
||||
"admin-default@example.org" = ["ALL"]
|
||||
}
|
||||
tag_bindings = {
|
||||
name1 = "default-id1"
|
||||
name2 = "default-id2"
|
||||
}
|
||||
services = [
|
||||
"default-service.googleapis.com"
|
||||
]
|
||||
}
|
||||
data_overrides = {
|
||||
prefix = "test-pf"
|
||||
}
|
||||
factories_config = {
|
||||
folders_data_path = "key_ignores_path/hierarchy"
|
||||
projects_data_path = "key_ignores_path/projects"
|
||||
projects_config = {
|
||||
key_ignores_path = true
|
||||
}
|
||||
context = {
|
||||
folder_ids = {
|
||||
default = "folders/5678901234"
|
||||
teams = "folders/5678901234"
|
||||
}
|
||||
iam_principals = {
|
||||
gcp-devops = "group:gcp-devops@example.org"
|
||||
}
|
||||
tag_values = {
|
||||
"org-policies/drs-allow-all" = "tagValues/123456"
|
||||
}
|
||||
vpc_host_projects = {
|
||||
dev-spoke-0 = "test-pf-dev-net-spoke-0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,238 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.hierarchy-folder-lvl-1["team-a"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team A
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-1["team-b"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Team B
|
||||
parent: folders/5678901234
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-a/dev"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Development
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-a/dev"].google_tags_tag_binding.binding["environment"]:
|
||||
tag_value: environment/development
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-a/prod"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Production
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-a/prod"].google_tags_tag_binding.binding["environment"]:
|
||||
tag_value: environment/production
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-b/dev"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Development
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-b/dev"].google_tags_tag_binding.binding["environment"]:
|
||||
tag_value: environment/development
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-b/prod"].google_folder.folder[0]:
|
||||
deletion_protection: false
|
||||
display_name: Production
|
||||
tags: null
|
||||
timeouts: null
|
||||
module.hierarchy-folder-lvl-2["team-b/prod"].google_tags_tag_binding.binding["environment"]:
|
||||
tag_value: environment/production
|
||||
timeouts: null
|
||||
module.projects-iam["dev-ta-0"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: test-pf-dev-net-spoke-0
|
||||
service_project: test-pf-dev-ta-0
|
||||
timeouts: null
|
||||
module.projects-iam["dev-ta-0"].google_project_iam_member.shared_vpc_host_iam["group:gcp-devops@example.org"]:
|
||||
condition: []
|
||||
member: group:gcp-devops@example.org
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects-iam["dev-tb-0"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: test-pf-dev-net-spoke-0
|
||||
service_project: test-pf-dev-tb-0
|
||||
timeouts: null
|
||||
module.projects-iam["dev-tb-0"].google_project_iam_member.shared_vpc_host_iam["group:gcp-devops@example.org"]:
|
||||
condition: []
|
||||
member: group:gcp-devops@example.org
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects-iam["prod-ta-0"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: prod-spoke-0
|
||||
service_project: test-pf-prod-ta-0
|
||||
timeouts: null
|
||||
module.projects-iam["prod-ta-0"].google_project_iam_member.shared_vpc_host_iam["group:gcp-devops@example.org"]:
|
||||
condition: []
|
||||
member: group:gcp-devops@example.org
|
||||
project: prod-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects-iam["prod-tb-0"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: prod-spoke-0
|
||||
service_project: test-pf-prod-tb-0
|
||||
timeouts: null
|
||||
module.projects-iam["prod-tb-0"].google_project_iam_member.shared_vpc_host_iam["group:gcp-devops@example.org"]:
|
||||
condition: []
|
||||
member: group:gcp-devops@example.org
|
||||
project: prod-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects["dev-ta-0"].google_essential_contacts_contact.contact["admin-default@example.org"]:
|
||||
email: admin-default@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-dev-ta-0
|
||||
timeouts: null
|
||||
module.projects["dev-ta-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 1245-5678-9012
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels: null
|
||||
name: test-pf-dev-ta-0
|
||||
project_id: test-pf-dev-ta-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["dev-ta-0"].google_project_service.project_services["default-service.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-ta-0
|
||||
service: default-service.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["dev-ta-0"].google_tags_tag_binding.binding["name1"]:
|
||||
tag_value: default-id1
|
||||
timeouts: null
|
||||
module.projects["dev-ta-0"].google_tags_tag_binding.binding["name2"]:
|
||||
tag_value: default-id2
|
||||
timeouts: null
|
||||
module.projects["dev-tb-0"].google_essential_contacts_contact.contact["admin-default@example.org"]:
|
||||
email: admin-default@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-dev-tb-0
|
||||
timeouts: null
|
||||
module.projects["dev-tb-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 1245-5678-9012
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels: null
|
||||
name: test-pf-dev-tb-0
|
||||
project_id: test-pf-dev-tb-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["dev-tb-0"].google_project_service.project_services["default-service.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-dev-tb-0
|
||||
service: default-service.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["dev-tb-0"].google_tags_tag_binding.binding["name1"]:
|
||||
tag_value: default-id1
|
||||
timeouts: null
|
||||
module.projects["dev-tb-0"].google_tags_tag_binding.binding["name2"]:
|
||||
tag_value: default-id2
|
||||
timeouts: null
|
||||
module.projects["prod-ta-0"].google_essential_contacts_contact.contact["admin-default@example.org"]:
|
||||
email: admin-default@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-prod-ta-0
|
||||
timeouts: null
|
||||
module.projects["prod-ta-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 1245-5678-9012
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels: null
|
||||
name: test-pf-prod-ta-0
|
||||
project_id: test-pf-prod-ta-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["prod-ta-0"].google_project_service.project_services["default-service.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-prod-ta-0
|
||||
service: default-service.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["prod-ta-0"].google_tags_tag_binding.binding["name1"]:
|
||||
tag_value: default-id1
|
||||
timeouts: null
|
||||
module.projects["prod-ta-0"].google_tags_tag_binding.binding["name2"]:
|
||||
tag_value: default-id2
|
||||
timeouts: null
|
||||
module.projects["prod-tb-0"].google_essential_contacts_contact.contact["admin-default@example.org"]:
|
||||
email: admin-default@example.org
|
||||
language_tag: en
|
||||
notification_category_subscriptions:
|
||||
- ALL
|
||||
parent: projects/test-pf-prod-tb-0
|
||||
timeouts: null
|
||||
module.projects["prod-tb-0"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 1245-5678-9012
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
labels: null
|
||||
name: test-pf-prod-tb-0
|
||||
project_id: test-pf-prod-tb-0
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["prod-tb-0"].google_project_service.project_services["default-service.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: test-pf-prod-tb-0
|
||||
service: default-service.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["prod-tb-0"].google_tags_tag_binding.binding["name1"]:
|
||||
tag_value: default-id1
|
||||
timeouts: null
|
||||
module.projects["prod-tb-0"].google_tags_tag_binding.binding["name2"]:
|
||||
tag_value: default-id2
|
||||
timeouts: null
|
||||
|
||||
counts:
|
||||
google_compute_shared_vpc_service_project: 4
|
||||
google_essential_contacts_contact: 4
|
||||
google_folder: 6
|
||||
google_project: 4
|
||||
google_project_iam_member: 4
|
||||
google_project_service: 4
|
||||
google_tags_tag_binding: 12
|
||||
modules: 14
|
||||
resources: 38
|
||||
@@ -1,39 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
data_defaults = {
|
||||
billing_account = "1245-5678-9012"
|
||||
storage_location = "EU"
|
||||
prefix = "my-prefix"
|
||||
parent = "folders/1234"
|
||||
}
|
||||
# location where the yaml files are read from
|
||||
factories_config = {
|
||||
projects_data_path = "projects"
|
||||
context = {
|
||||
folder_ids = {
|
||||
default = "folders/5678901234"
|
||||
teams = "folders/5678901234"
|
||||
}
|
||||
iam_principals = {
|
||||
gcp-devops = "group:gcp-devops@example.org"
|
||||
}
|
||||
tag_values = {
|
||||
"org-policies/drs-allow-all" = "tagValues/123456"
|
||||
}
|
||||
vpc_host_projects = {
|
||||
dev-spoke-0 = "test-pf-dev-net-spoke-0"
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -1,160 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
values:
|
||||
module.automation-service-accounts["service1/automation/ro"].google_service_account.service_account[0]:
|
||||
account_id: my-prefix-service1-ro
|
||||
create_ignore_already_exists: null
|
||||
description: Service read-only automation sa.
|
||||
disabled: false
|
||||
display_name: Service account ro for service1.
|
||||
email: my-prefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
member: serviceAccount:my-prefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
project: service-iac
|
||||
timeouts: null
|
||||
module.automation-service-accounts["service1/automation/rw"].google_service_account.service_account[0]:
|
||||
account_id: my-prefix-service1-rw
|
||||
create_ignore_already_exists: null
|
||||
description: Service read/write automation sa.
|
||||
disabled: false
|
||||
display_name: Service account rw for service1.
|
||||
email: my-prefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
member: serviceAccount:my-prefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
project: service-iac
|
||||
timeouts: null
|
||||
module.projects-iam["service1"].google_compute_shared_vpc_service_project.shared_vpc_service[0]:
|
||||
deletion_policy: null
|
||||
host_project: test-pf-dev-net-spoke-0
|
||||
service_project: my-prefix-service1
|
||||
timeouts: null
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:my-prefix-service1-ro@service-iac.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:my-prefix-service1-ro@service-iac.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:my-prefix-service1-rw@service-iac.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:my-prefix-service1-rw@service-iac.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
? module.projects-iam["service1"].google_project_iam_member.shared_vpc_host_iam["serviceAccount:terraform-rw@my-prefix-service1.iam.gserviceaccount.com"]
|
||||
: condition: []
|
||||
member: serviceAccount:terraform-rw@my-prefix-service1.iam.gserviceaccount.com
|
||||
project: test-pf-dev-net-spoke-0
|
||||
role: roles/compute.networkUser
|
||||
module.projects["service1"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
folder_id: '1234'
|
||||
labels: null
|
||||
name: my-prefix-service1
|
||||
org_id: null
|
||||
project_id: my-prefix-service1
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["service2"].data.google_storage_project_service_account.gcs_sa[0]:
|
||||
project: my-prefix-service2
|
||||
user_project: null
|
||||
module.projects["service2"].google_project.project[0]:
|
||||
auto_create_network: false
|
||||
billing_account: 012345-67890A-BCDEF0
|
||||
deletion_policy: DELETE
|
||||
effective_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
folder_id: '1234'
|
||||
labels: null
|
||||
name: my-prefix-service2
|
||||
org_id: null
|
||||
project_id: my-prefix-service2
|
||||
tags: null
|
||||
terraform_labels:
|
||||
goog-terraform-provisioned: 'true'
|
||||
timeouts: null
|
||||
module.projects["service2"].google_project_iam_member.service_agents["compute-system"]:
|
||||
condition: []
|
||||
project: my-prefix-service2
|
||||
role: roles/compute.serviceAgent
|
||||
module.projects["service2"].google_project_service.project_services["compute.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: my-prefix-service2
|
||||
service: compute.googleapis.com
|
||||
timeouts: null
|
||||
module.projects["service2"].google_project_service.project_services["storage.googleapis.com"]:
|
||||
disable_dependent_services: false
|
||||
disable_on_destroy: false
|
||||
project: my-prefix-service2
|
||||
service: storage.googleapis.com
|
||||
timeouts: null
|
||||
module.service-accounts["service1/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@my-prefix-service1.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@my-prefix-service1.iam.gserviceaccount.com
|
||||
project: my-prefix-service1
|
||||
timeouts: null
|
||||
module.service-accounts["service1/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@my-prefix-service1.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@my-prefix-service1.iam.gserviceaccount.com
|
||||
project: my-prefix-service1
|
||||
timeouts: null
|
||||
module.service-accounts["service2/app-be-0"].google_service_account.service_account[0]:
|
||||
account_id: app-be-0
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: app-be-0@my-prefix-service2.iam.gserviceaccount.com
|
||||
member: serviceAccount:app-be-0@my-prefix-service2.iam.gserviceaccount.com
|
||||
project: my-prefix-service2
|
||||
timeouts: null
|
||||
module.service-accounts["service2/terraform-rw"].google_service_account.service_account[0]:
|
||||
account_id: terraform-rw
|
||||
create_ignore_already_exists: null
|
||||
description: null
|
||||
disabled: false
|
||||
display_name: Terraform-managed.
|
||||
email: terraform-rw@my-prefix-service2.iam.gserviceaccount.com
|
||||
member: serviceAccount:terraform-rw@my-prefix-service2.iam.gserviceaccount.com
|
||||
project: my-prefix-service2
|
||||
timeouts: null
|
||||
|
||||
counts:
|
||||
google_compute_shared_vpc_service_project: 1
|
||||
google_project: 2
|
||||
google_project_iam_member: 4
|
||||
google_project_service: 2
|
||||
google_service_account: 6
|
||||
google_storage_project_service_account: 1
|
||||
modules: 9
|
||||
resources: 16
|
||||
|
||||
outputs:
|
||||
buckets: {}
|
||||
folders: {}
|
||||
projects: __missing__
|
||||
service_accounts: __missing__
|
||||
@@ -1,29 +0,0 @@
|
||||
# Copyright 2025 Google LLC
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
module: modules/project-factory-legacy
|
||||
|
||||
tests:
|
||||
bucket_iam:
|
||||
extra_dirs:
|
||||
- ../../tests/modules/project_factory_legacy/data/bucket_iam
|
||||
shared_vpc_network_user:
|
||||
extra_dirs:
|
||||
- ../../tests/modules/project_factory_legacy/data/shared_vpc_network_user/projects
|
||||
data_overrides_defaults:
|
||||
extra_dirs:
|
||||
- ../../tests/modules/project_factory_legacy/data/data_overrides_defaults/projects
|
||||
key_ignores_path:
|
||||
extra_dirs:
|
||||
- ../../tests/modules/project_factory_legacy/data/key_ignores_path
|
||||
Reference in New Issue
Block a user