Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
/**
|
2024-02-12 05:35:30 -08:00
|
|
|
* Copyright 2024 Google LLC
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
*
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
*
|
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
*
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
|
|
|
*/
|
|
|
|
|
|
|
|
# tfdoc:file:description Data Platform stages resources.
|
|
|
|
|
|
|
|
module "branch-dp-folder" {
|
|
|
|
source = "../../../modules/folder"
|
2022-06-28 08:33:37 -07:00
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
parent = "organizations/${var.organization.id}"
|
2022-02-14 07:54:40 -08:00
|
|
|
name = "Data Platform"
|
2024-04-04 01:26:35 -07:00
|
|
|
iam = var.folder_iam.data_platform
|
2022-02-20 02:26:30 -08:00
|
|
|
tag_bindings = {
|
2022-04-13 01:22:33 -07:00
|
|
|
context = try(
|
|
|
|
module.organization.tag_values["${var.tag_names.context}/data"].id, null
|
|
|
|
)
|
2022-02-20 02:26:30 -08:00
|
|
|
}
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
|
|
|
|
|
|
|
module "branch-dp-dev-folder" {
|
2024-02-12 05:35:30 -08:00
|
|
|
source = "../../../modules/folder"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
parent = module.branch-dp-folder.0.id
|
|
|
|
name = "Development"
|
|
|
|
iam_by_principals = {}
|
2023-12-27 03:33:16 -08:00
|
|
|
# owner and viewer roles are broad and might grant unwanted access
|
|
|
|
# replace them with more selective custom roles for production deployments
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
iam = {
|
2023-12-27 03:33:16 -08:00
|
|
|
# read-write (apply) automation service account
|
2022-06-28 08:33:37 -07:00
|
|
|
(local.custom_roles.service_project_network_admin) = [
|
|
|
|
module.branch-dp-dev-sa.0.iam_email
|
|
|
|
]
|
|
|
|
"roles/logging.admin" = [module.branch-dp-dev-sa.0.iam_email]
|
2024-01-25 03:20:14 -08:00
|
|
|
"roles/owner" = [module.branch-dp-dev-sa.0.iam_email]
|
2022-06-28 08:33:37 -07:00
|
|
|
"roles/resourcemanager.folderAdmin" = [module.branch-dp-dev-sa.0.iam_email]
|
|
|
|
"roles/resourcemanager.projectCreator" = [module.branch-dp-dev-sa.0.iam_email]
|
2023-12-27 03:33:16 -08:00
|
|
|
# read-only (plan) automation service account
|
|
|
|
"roles/viewer" = [module.branch-dp-dev-r-sa.0.iam_email]
|
|
|
|
"roles/resourcemanager.folderViewer" = [module.branch-dp-dev-r-sa.0.iam_email]
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
2022-02-20 02:26:30 -08:00
|
|
|
tag_bindings = {
|
2022-04-13 01:22:33 -07:00
|
|
|
context = try(
|
2022-06-30 09:22:57 -07:00
|
|
|
module.organization.tag_values["${var.tag_names.environment}/development"].id,
|
|
|
|
null
|
2022-04-13 01:22:33 -07:00
|
|
|
)
|
2022-02-20 02:26:30 -08:00
|
|
|
}
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
|
|
|
|
|
|
|
module "branch-dp-prod-folder" {
|
2024-02-12 05:35:30 -08:00
|
|
|
source = "../../../modules/folder"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
parent = module.branch-dp-folder.0.id
|
|
|
|
name = "Production"
|
|
|
|
iam_by_principals = {}
|
2023-12-27 03:33:16 -08:00
|
|
|
# owner and viewer roles are broad and might grant unwanted access
|
|
|
|
# replace them with more selective custom roles for production deployments
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
iam = {
|
2023-12-27 03:33:16 -08:00
|
|
|
# read-write (apply) automation service account
|
2022-06-28 08:33:37 -07:00
|
|
|
(local.custom_roles.service_project_network_admin) = [module.branch-dp-prod-sa.0.iam_email]
|
2023-12-27 03:33:16 -08:00
|
|
|
"roles/owner" = [module.branch-dp-prod-sa.0.iam_email]
|
|
|
|
"roles/logging.admin" = [module.branch-dp-prod-sa.0.iam_email]
|
|
|
|
"roles/resourcemanager.folderAdmin" = [module.branch-dp-prod-sa.0.iam_email]
|
|
|
|
"roles/resourcemanager.projectCreator" = [module.branch-dp-prod-sa.0.iam_email]
|
|
|
|
# read-only (plan) automation service account
|
|
|
|
"roles/viewer" = [module.branch-dp-prod-r-sa.0.iam_email]
|
|
|
|
"roles/resourcemanager.folderViewer" = [module.branch-dp-prod-r-sa.0.iam_email]
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
2022-02-20 02:26:30 -08:00
|
|
|
tag_bindings = {
|
2022-04-13 01:22:33 -07:00
|
|
|
context = try(
|
2022-06-30 09:22:57 -07:00
|
|
|
module.organization.tag_values["${var.tag_names.environment}/production"].id,
|
|
|
|
null
|
2022-04-13 01:22:33 -07:00
|
|
|
)
|
2022-02-20 02:26:30 -08:00
|
|
|
}
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
|
|
|
|
2023-12-27 03:33:16 -08:00
|
|
|
# automation service accounts
|
2022-04-11 23:17:27 -07:00
|
|
|
|
|
|
|
module "branch-dp-dev-sa" {
|
2022-11-03 08:23:48 -07:00
|
|
|
source = "../../../modules/iam-service-account"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "dev-resman-dp-0"
|
|
|
|
display_name = "Terraform data platform development service account."
|
|
|
|
prefix = var.prefix
|
2022-04-11 23:17:27 -07:00
|
|
|
iam = {
|
|
|
|
"roles/iam.serviceAccountTokenCreator" = compact([
|
|
|
|
try(module.branch-dp-dev-sa-cicd.0.iam_email, null)
|
|
|
|
])
|
|
|
|
}
|
2023-10-18 05:18:31 -07:00
|
|
|
iam_project_roles = {
|
|
|
|
(var.automation.project_id) = ["roles/serviceusage.serviceUsageConsumer"]
|
|
|
|
}
|
2022-04-11 23:17:27 -07:00
|
|
|
iam_storage_roles = {
|
2023-03-17 09:24:55 -07:00
|
|
|
(var.automation.outputs_bucket) = ["roles/storage.objectAdmin"]
|
2022-04-11 23:17:27 -07:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
module "branch-dp-prod-sa" {
|
2022-11-03 08:23:48 -07:00
|
|
|
source = "../../../modules/iam-service-account"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "prod-resman-dp-0"
|
|
|
|
display_name = "Terraform data platform production service account."
|
|
|
|
prefix = var.prefix
|
2022-04-11 23:17:27 -07:00
|
|
|
iam = {
|
|
|
|
"roles/iam.serviceAccountTokenCreator" = compact([
|
|
|
|
try(module.branch-dp-prod-sa-cicd.0.iam_email, null)
|
|
|
|
])
|
|
|
|
}
|
|
|
|
iam_storage_roles = {
|
2023-03-17 09:24:55 -07:00
|
|
|
(var.automation.outputs_bucket) = ["roles/storage.objectAdmin"]
|
2022-04-11 23:17:27 -07:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2023-12-27 03:33:16 -08:00
|
|
|
# automation read-only service accounts
|
|
|
|
|
|
|
|
module "branch-dp-dev-r-sa" {
|
|
|
|
source = "../../../modules/iam-service-account"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "dev-resman-dp-0r"
|
|
|
|
display_name = "Terraform data platform development service account (read-only)."
|
|
|
|
prefix = var.prefix
|
|
|
|
iam = {
|
|
|
|
"roles/iam.serviceAccountTokenCreator" = compact([
|
|
|
|
try(module.branch-dp-dev-r-sa-cicd.0.iam_email, null)
|
|
|
|
])
|
|
|
|
}
|
|
|
|
iam_project_roles = {
|
|
|
|
(var.automation.project_id) = ["roles/serviceusage.serviceUsageConsumer"]
|
|
|
|
}
|
|
|
|
iam_storage_roles = {
|
|
|
|
(var.automation.outputs_bucket) = [var.custom_roles["storage_viewer"]]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
module "branch-dp-prod-r-sa" {
|
|
|
|
source = "../../../modules/iam-service-account"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "prod-resman-dp-0r"
|
|
|
|
display_name = "Terraform data platform production service account (read-only)."
|
|
|
|
prefix = var.prefix
|
|
|
|
iam = {
|
|
|
|
"roles/iam.serviceAccountTokenCreator" = compact([
|
|
|
|
try(module.branch-dp-prod-r-sa-cicd.0.iam_email, null)
|
|
|
|
])
|
|
|
|
}
|
|
|
|
iam_project_roles = {
|
|
|
|
(var.automation.project_id) = ["roles/serviceusage.serviceUsageConsumer"]
|
|
|
|
}
|
|
|
|
iam_storage_roles = {
|
|
|
|
(var.automation.outputs_bucket) = [var.custom_roles["storage_viewer"]]
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
# automation buckets
|
|
|
|
|
2022-04-11 23:17:27 -07:00
|
|
|
module "branch-dp-dev-gcs" {
|
2022-09-08 06:24:42 -07:00
|
|
|
source = "../../../modules/gcs"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "dev-resman-dp-0"
|
|
|
|
prefix = var.prefix
|
|
|
|
location = var.locations.gcs
|
|
|
|
storage_class = local.gcs_storage_class
|
|
|
|
versioning = true
|
2022-04-11 23:17:27 -07:00
|
|
|
iam = {
|
2023-12-27 03:33:16 -08:00
|
|
|
"roles/storage.objectAdmin" = [module.branch-dp-dev-sa.0.iam_email]
|
|
|
|
"roles/storage.objectViewer" = [module.branch-dp-dev-r-sa.0.iam_email]
|
2022-04-11 23:17:27 -07:00
|
|
|
}
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
|
|
|
|
|
|
|
module "branch-dp-prod-gcs" {
|
2022-09-08 06:24:42 -07:00
|
|
|
source = "../../../modules/gcs"
|
|
|
|
count = var.fast_features.data_platform ? 1 : 0
|
|
|
|
project_id = var.automation.project_id
|
|
|
|
name = "prod-resman-dp-0"
|
|
|
|
prefix = var.prefix
|
|
|
|
location = var.locations.gcs
|
|
|
|
storage_class = local.gcs_storage_class
|
|
|
|
versioning = true
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
iam = {
|
2023-12-27 03:33:16 -08:00
|
|
|
"roles/storage.objectAdmin" = [module.branch-dp-prod-sa.0.iam_email]
|
|
|
|
"roles/storage.objectViewer" = [module.branch-dp-prod-r-sa.0.iam_email]
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
}
|
|
|
|
}
|