Add datacatalog

This commit is contained in:
Lorenzo Caggioni
2022-02-02 16:51:14 +01:00
parent a597679349
commit e51722d615
3 changed files with 8 additions and 7 deletions

View File

@@ -48,6 +48,7 @@ module "cmn-prj" {
iam_additive = var.project_create == null ? local.iam_cmn : {}
group_iam = local.group_iam_cmn
services = concat(var.project_services, [
"datacatalog.googleapis.com",
"dlp.googleapis.com",
])
}
@@ -55,9 +56,9 @@ module "cmn-prj" {
# Uncomment this section and assigne key links accondingly in local. variable
# if you want to create KMS keys in the common projet
# module "sec-kms-0" {
# module "cmn-kms-0" {
# source = "../../../modules/kms"
# project_id = module.sec-prj.project_id
# project_id = module.cmn-prj.project_id
# keyring = {
# name = "${var.prefix}-kr-global",
# location = var.location_config.region
@@ -67,9 +68,9 @@ module "cmn-prj" {
# }
# }
# module "sec-kms-1" {
# module "cmn-kms-1" {
# source = "../../../modules/kms"
# project_id = module.sec-prj.project_id
# project_id = module.cmn-prj.project_id
# keyring = {
# name = "${var.prefix}-kr-mregional",
# location = var.location_config.region
@@ -80,9 +81,9 @@ module "cmn-prj" {
# }
# }
# module "sec-kms-2" {
# module "cmn-kms-2" {
# source = "../../../modules/kms"
# project_id = module.sec-prj.project_id
# project_id = module.cmn-prj.project_id
# keyring = {
# name = "${var.prefix}-kr-regional",
# location = var.location_config.region

View File

@@ -168,7 +168,7 @@ For a more fine grained configuration, check variables on [`variables.tf`](./var
## Customizations
### Create Cloud Key Management keys as part of the DP
To create Cloud Key Management keys in the DP you can uncomment the Cloud Key Management resources configured in the [`06-sec-main.tf`](./06-sec-main.tf) file and update Cloud Key Management keys pointers on `local.service_encryption_keys.*` to the local resource created.
To create Cloud Key Management keys in the DP you can uncomment the Cloud Key Management resources configured in the [`06-common.tf`](./06-common.tf) file and update Cloud Key Management keys pointers on `local.service_encryption_keys.*` to the local resource created.
### Assign roles at BQ Dataset level
To handle multiple groups of `data-analysts` accessing the same Data Lake layer projects but only to the dataset belonging to a specific group, you may want to assign roles at BigQuery dataset level instead of at project-level.

Binary file not shown.

Before

Width:  |  Height:  |  Size: 78 KiB

After

Width:  |  Height:  |  Size: 70 KiB