|
|
|
|
@@ -329,8 +329,8 @@ terraform apply
|
|
|
|
|
| [custom_roles](variables-fast.tf#L54) | Custom roles defined at the org level, in key => id format. | <code title="object({ billing_viewer = string dns_zone_binder = string kms_key_encryption_admin = string kms_key_viewer = string organization_admin_viewer = string project_iam_viewer = string service_project_network_admin = string storage_viewer = string gcve_network_admin = optional(string) gcve_network_viewer = optional(string) network_firewall_policies_admin = optional(string) ngfw_enterprise_admin = optional(string) ngfw_enterprise_viewer = optional(string) })">object({…})</code> | | <code>null</code> | <code>0-bootstrap</code> |
|
|
|
|
|
| [factories_config](variables.tf#L20) | Configuration for the resource factories or external data. | <code title="object({ stage_2 = optional(string, "data/stage-2") stage_3 = optional(string, "data/stage-3") tags = optional(string, "data/tags") top_level_folders = optional(string, "data/top-level-folders") context = optional(object({ org_policies = optional(map(map(string)), {}) tag_keys = optional(map(string), {}) tag_values = optional(map(string), {}) }), {}) })">object({…})</code> | | <code>{}</code> | |
|
|
|
|
|
| [fast_addon](variables-addons.tf#L17) | FAST addons configurations for stages 2. Keys are used as short names for the add-on resources. | <code title="map(object({ parent_stage = string cicd_config = optional(object({ identity_provider = string repository = object({ name = string branch = optional(string) type = optional(string, "github") }) })) }))">map(object({…}))</code> | | <code>{}</code> | |
|
|
|
|
|
| [fast_stage_2](variables-stages.tf#L17) | FAST stages 2 configurations. | <code title="map(object({ short_name = optional(string) cicd_config = optional(object({ identity_provider = string repository = object({ name = string branch = optional(string) type = optional(string, "github") }) workflows_config = optional(object({ tf_var_files = optional(list(string), []) }), {}) })) folder_config = optional(object({ name = string parent_id = optional(string) create_env_folders = optional(bool, true) iam = optional(map(list(string)), {}) iam_bindings = optional(map(list(string)), {}) iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) org_policies = optional(map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) })), []) })), {}) tag_bindings = optional(map(string), {}) })) organization_config = optional(object({ iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) }), {}) stage3_config = optional(object({ iam_admin_delegated = optional(list(object({ environment = string principal = string })), []) iam_viewer = optional(list(object({ environment = string principal = string })), []) }), {}) }))">map(object({…}))</code> | | <code>{}</code> | |
|
|
|
|
|
| [fast_stage_3](variables-stages.tf#L117) | FAST stages 3 configurations. | <code title="map(object({ short_name = optional(string) environment = optional(string, "dev") cicd_config = optional(object({ identity_provider = string repository = object({ name = string branch = optional(string) type = optional(string, "github") }) workflows_config = optional(object({ tf_var_files = optional(list(string), []) }), {}) })) folder_config = optional(object({ name = string parent_id = optional(string) tag_bindings = optional(map(string), {}) iam = optional(map(list(string)), {}) iam_bindings = optional(map(list(string)), {}) iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) org_policies = optional(map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) })), []) })), {}) })) }))">map(object({…}))</code> | | <code>{}</code> | |
|
|
|
|
|
| [fast_stage_2](variables-stages.tf#L17) | FAST stages 2 configurations. | <code title="map(object({ short_name = optional(string) cicd_config = optional(object({ identity_provider = string repository = object({ name = string branch = optional(string) type = optional(string, "github") }) workflows_config = optional(object({ extra_files = optional(list(string), []) }), {}) })) folder_config = optional(object({ name = string parent_id = optional(string) create_env_folders = optional(bool, true) iam = optional(map(list(string)), {}) iam_bindings = optional(map(list(string)), {}) iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) org_policies = optional(map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) })), []) })), {}) tag_bindings = optional(map(string), {}) })) organization_config = optional(object({ iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) }), {}) stage3_config = optional(object({ iam_admin_delegated = optional(list(object({ environment = string principal = string })), []) iam_viewer = optional(list(object({ environment = string principal = string })), []) }), {}) }))">map(object({…}))</code> | | <code>{}</code> | |
|
|
|
|
|
| [fast_stage_3](variables-stages.tf#L117) | FAST stages 3 configurations. | <code title="map(object({ short_name = optional(string) environment = optional(string, "dev") cicd_config = optional(object({ identity_provider = string repository = object({ name = string branch = optional(string) type = optional(string, "github") }) workflows_config = optional(object({ extra_files = optional(list(string), []) }), {}) })) folder_config = optional(object({ name = string parent_id = optional(string) tag_bindings = optional(map(string), {}) iam = optional(map(list(string)), {}) iam_bindings = optional(map(list(string)), {}) iam_bindings_additive = optional(map(object({ member = string role = string condition = optional(object({ expression = string title = string description = optional(string) })) })), {}) iam_by_principals = optional(map(list(string)), {}) org_policies = optional(map(object({ inherit_from_parent = optional(bool) # for list policies only. reset = optional(bool) rules = optional(list(object({ allow = optional(object({ all = optional(bool) values = optional(list(string)) })) deny = optional(object({ all = optional(bool) values = optional(list(string)) })) enforce = optional(bool) # for boolean policies only. condition = optional(object({ description = optional(string) expression = optional(string) location = optional(string) title = optional(string) }), {}) })), []) })), {}) })) }))">map(object({…}))</code> | | <code>{}</code> | |
|
|
|
|
|
| [groups](variables-fast.tf#L93) | Group names or IAM-format principals to grant organization-level permissions. If just the name is provided, the 'group:' principal and organization domain are interpolated. | <code title="object({ gcp-billing-admins = optional(string, "gcp-billing-admins") gcp-devops = optional(string, "gcp-devops") gcp-network-admins = optional(string, "gcp-vpc-network-admins") gcp-organization-admins = optional(string, "gcp-organization-admins") gcp-secops-admins = optional(string, "gcp-security-admins") gcp-security-admins = optional(string, "gcp-security-admins") })">object({…})</code> | | <code>{}</code> | <code>0-bootstrap</code> |
|
|
|
|
|
| [locations](variables-fast.tf#L109) | Optional locations for GCS, BigQuery, and logging buckets created here. | <code title="object({ bq = optional(string, "EU") gcs = optional(string, "EU") logging = optional(string, "global") pubsub = optional(list(string), []) })">object({…})</code> | | <code>{}</code> | <code>0-bootstrap</code> |
|
|
|
|
|
| [org_policy_tags](variables-fast.tf#L153) | Organization policy tags. | <code title="object({ key_id = optional(string) key_name = optional(string, "org-policies") values = optional(map(string), {}) })">object({…})</code> | | <code>{}</code> | <code>0-bootstrap</code> |
|
|
|
|
|
|