Refactor service agent management (#2423)

* Service agents script

* Service agents update

* WIP

* Update script and terraform

* Fix tests

* Fix linter

* Update docs

* Bring back pf example inventory

* Fix tests

* Fix more tests

* Fix tests

* Use dataclasses for build_service_agents.py

* Remove unneeded field() from build_service_agents

* Re-enable CMEK depends_on in project outputs

* Update tools/requirements.txt

* Enable storage in GCS example projects

* Fix tests

* Add CMEK Service Agents dependencies for services

* Fix typos and data platform cmek

* More typos
This commit is contained in:
Julio Castillo
2024-07-23 22:05:38 +02:00
committed by GitHub
parent e49b2d686f
commit c0bf32e797
147 changed files with 3676 additions and 1301 deletions

View File

@@ -37,6 +37,7 @@ module "project" {
source = "./fabric/modules/project"
name = var.project_id
project_create = false
services = ["storage.googleapis.com"]
}
module "kms" {
@@ -50,7 +51,7 @@ module "kms" {
bucket_key = {
iam_bindings = {
bucket_key_iam = {
members = ["serviceAccount:${module.project.service_accounts.robots.storage}"]
members = [module.project.service_agents.storage.iam_email]
role = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
}
}
@@ -123,6 +124,7 @@ module "project" {
source = "./fabric/modules/project"
name = var.project_id
project_create = false
services = ["storage.googleapis.com"]
}
module "bucket-gcs-notification" {
@@ -134,7 +136,7 @@ module "bucket-gcs-notification" {
notification_config = {
enabled = true
payload_format = "JSON_API_V1"
sa_email = module.project.service_accounts.robots.storage
sa_email = module.project.service_agents.storage.email
topic_name = "gcs-notification-topic"
event_types = ["OBJECT_FINALIZE"]
custom_attributes = {}