71 lines
2.1 KiB
YAML
71 lines
2.1 KiB
YAML
# Copyright 2023 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
values:
|
|
module.cloud_run.google_cloud_run_service.service:
|
|
name: hello
|
|
project: project-id
|
|
template:
|
|
- spec:
|
|
- containers:
|
|
- image: us-docker.pkg.dev/cloudrun/container/hello
|
|
|
|
module.cloud_run.google_cloud_run_service_iam_binding.binding["roles/run.invoker"]:
|
|
condition: []
|
|
location: europe-west8
|
|
members:
|
|
- serviceAccount:eventarc-trigger@project-id.iam.gserviceaccount.com
|
|
project: project-id
|
|
role: roles/run.invoker
|
|
service: hello
|
|
|
|
module.cloud_run.google_eventarc_trigger.audit_log_triggers["setiampolicy"]:
|
|
destination:
|
|
- cloud_function: null
|
|
cloud_run_service:
|
|
- path: null
|
|
region: europe-west8
|
|
service: hello
|
|
gke: []
|
|
workflow: null
|
|
location: europe-west8
|
|
matching_criteria:
|
|
- attribute: methodName
|
|
operator: ''
|
|
value: SetIamPolicy
|
|
- attribute: serviceName
|
|
operator: ''
|
|
value: cloudresourcemanager.googleapis.com
|
|
- attribute: type
|
|
operator: ''
|
|
value: google.cloud.audit.log.v1.written
|
|
name: audit-log-setiampolicy
|
|
project: project-id
|
|
|
|
module.sa.google_project_iam_member.project-roles["project-id-roles/eventarc.eventReceiver"]:
|
|
condition: []
|
|
project: project-id
|
|
role: roles/eventarc.eventReceiver
|
|
|
|
module.sa.google_service_account.service_account[0]:
|
|
account_id: eventarc-trigger
|
|
project: project-id
|
|
|
|
counts:
|
|
google_cloud_run_service: 1
|
|
google_cloud_run_service_iam_binding: 1
|
|
google_eventarc_trigger: 1
|
|
google_project_iam_member: 1
|
|
google_service_account: 1
|