# Copyright 2026 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # https://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. values: google_project_iam_member.artifact_writer: condition: [] member: serviceAccount:123-compute@developer.gserviceaccount.com project: project-id role: roles/artifactregistry.createOnPushWriter google_project_iam_member.bucket_default_compute_account_grant: condition: [] member: serviceAccount:123-compute@developer.gserviceaccount.com project: project-id role: roles/storage.objectViewer module.cf-http.data.archive_file.bundle[0]: exclude_symlink_directories: null excludes: null output_file_mode: '0644' output_path: /tmp/bundle-project-id-test-cf-http.zip source: [] source_content: null source_content_filename: null source_dir: assets/sample-function/ source_file: null type: zip module.cf-http.google_cloudfunctions2_function.function: build_config: - entry_point: main on_deploy_update_policy: [] runtime: python310 source: - repo_source: [] storage_source: - bucket: bucket worker_pool: null deletion_policy: DELETE description: Terraform managed. effective_labels: goog-terraform-provisioned: 'true' event_trigger: [] kms_key_name: null labels: null location: europe-west8 name: test-cf-http project: project-id service_config: - all_traffic_on_latest_revision: true available_cpu: '0.166' available_memory: 256M binary_authorization_policy: null direct_vpc_network_interface: [] environment_variables: LOG_EXECUTION_ID: 'true' ingress_settings: ALLOW_ALL max_instance_count: 1 min_instance_count: 0 secret_environment_variables: - key: VARIABLE_SECRET project_id: project-id version: latest secret_volumes: - mount_path: /app/secret project_id: project-id versions: - {} service_account_email: test-cf-http@project-id.iam.gserviceaccount.com timeout_seconds: 180 vpc_connector: null vpc_connector_egress_settings: null terraform_labels: goog-terraform-provisioned: 'true' timeouts: null module.cf-http.google_project_iam_member.default["roles/logging.logWriter"]: condition: [] member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com project: project-id role: roles/logging.logWriter module.cf-http.google_project_iam_member.default["roles/monitoring.metricWriter"]: condition: [] member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com project: project-id role: roles/monitoring.metricWriter module.cf-http.google_service_account.service_account[0]: account_id: test-cf-http create_ignore_already_exists: null deletion_policy: DELETE description: null disabled: false display_name: test-cf-http email: test-cf-http@project-id.iam.gserviceaccount.com member: serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com project: project-id timeouts: null module.cf-http.google_storage_bucket_object.bundle[0]: bucket: bucket cache_control: null content_disposition: null content_encoding: null content_language: null contexts: [] customer_encryption: [] deletion_policy: DELETE detect_md5hash: null event_based_hold: null force_empty_content_type: null metadata: null retention: [] source: /tmp/bundle-project-id-test-cf-http.zip temporary_hold: null timeouts: null module.secret-manager.google_secret_manager_secret.default["credentials"]: annotations: null deletion_policy: DELETE deletion_protection: false effective_labels: goog-terraform-provisioned: 'true' labels: null project: project-id replication: - auto: - customer_managed_encryption: [] user_managed: [] rotation: [] secret_id: credentials tags: null terraform_labels: goog-terraform-provisioned: 'true' timeouts: null topics: [] ttl: null version_aliases: null version_destroy_ttl: null ? module.secret-manager.google_secret_manager_secret_iam_binding.authoritative["credentials.roles/secretmanager.secretAccessor"] : condition: [] members: - serviceAccount:test-cf-http@project-id.iam.gserviceaccount.com role: roles/secretmanager.secretAccessor module.secret-manager.google_secret_manager_secret_version.default["credentials/v1"]: enabled: true is_secret_data_base64: false secret_data: manual foo bar spam secret_data_wo: null secret_data_wo_version: 0 timeouts: null counts: archive_file: 1 google_cloudfunctions2_function: 1 google_project_iam_member: 4 google_secret_manager_secret: 1 google_secret_manager_secret_iam_binding: 1 google_secret_manager_secret_version: 1 google_service_account: 1 google_storage_bucket_object: 1 modules: 2 resources: 11 outputs: {}