2022-01-19 05:17:20 -08:00
|
|
|
/**
|
|
|
|
* Copyright 2022 Google LLC
|
|
|
|
*
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
*
|
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
*
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
|
|
|
*/
|
|
|
|
|
|
|
|
# tfdoc:file:description Billing resources for external billing use cases.
|
|
|
|
|
|
|
|
locals {
|
|
|
|
# used here for convenience, in organization.tf members are explicit
|
|
|
|
billing_ext_users = concat(
|
|
|
|
[
|
Add Data Platform to FAST (#510)
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* merge tools changes
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* add bolierplate to validate_schema
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
* Import Fast from dev repository.
>
>
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* stage 02-security
* Import Fast from dev repository.
Co-authored-by: Julio Castillo <jccb@google.com>
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
* Copy FAST top level README
* Copy FAST top level README
* TODO list
* TODO list
* fix linting action to account for fast
* remove providers file
* add missing boilerplate
* update factory README
* align examples tfdoc
* fast readmes tfdoc
* disable markdown link check
* really disable markdown link check
* update TODO
* switch to local module refs in stage0
* replace module refs in 02-sec
* Move first draft to fast branch
* Fix roles and variables. Add e2e DAG example!
* Fix example
* Fix KMS
* First draft: README
* Update README
* Add DLP, update README
* Update Readme
* README
* Add todos
* Merge master
* Merge master
* Merge master
* Fix and test KMS, Fix and test existing prj (it works also with single prj), Update README
* Fix READM and Demo
* add on TF files
* Remove block comments
* simplify service_encryption_keys logic
* fix README
* Fix TODOs
* fix tfdoc description
* fix demo README
* fix sample files
* rename tf files
* Fix outputs file name, fix README, remove dependeces on composer resource
* Add test.
* Fix README.
* Initial README update
* README review
* Fix issues & readme
* Fix README
* Fix README
* Fix test error
* Fix test error
* Add datacatalog
* Fix test, for real? :-)
* fix readme
* support policy_boolean
* split Cloud NAT flag
* Fix README.
* Fix Shared VPC, first try :-)
* Fix tests and resource name
* fix tests
* fix tests
* README refactor
* Fix secondary range logic
* First commit
* Replace existing data platform
* Fix secondary range logic
* Fix README
* Replace DP example tests with the new one.
* Fix test module location.
* Fix test module location, for real.
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Add PubSub encryption
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* Update READMEs
* Update README
* Fix composer roles and README.
* Fix test.
* Fixes.
* Add DLP documentation link.
* Temp commit with errors
* Refactor variables
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Fix new variables
* Fix misconfiguration and tests.
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Add TODO, VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Add TODO
* Fix module path
* Initial fix for KMS
* rebase
* rebase
* rebase
* Rebase
* rebase
* Update READMEs
* Fixes.
* Rebase - Fix secondary range logic
* Rebase - First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Possible improvement to handle VPC-SC perimeter projects with folder as variable
* Initial fix for KMS
* Fix secondary range logic
* First commit
* Support DataPlatform project in VPC-SC
* Fix VPC-SC
* Fix module path
* Initial fix for KMS
* Update READMEs
* Fixes.
* Fix new variables
* Revert VPC-SC logic
* Fix variable typos
* README fixes
* Fix Project Name logic
* Fix Linting
* READEME
* update READEME
* update READEME
* update README
* mandatory project creation, refactor
* formatting
* add TODO for service accounts descriptive name
* use project module to assign shared vpc roles
* Fix shared-vpc-project module
* Fix vpc name and tests
* README
* update to newer version
Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
Co-authored-by: Simone Ruffilli <sruffilli@google.com>
Co-authored-by: Julio Castillo <juliocc@users.noreply.github.com>
Co-authored-by: Julio Castillo <jccb@google.com>
2022-02-11 08:32:16 -08:00
|
|
|
module.branch-dp-dev-sa.iam_email,
|
|
|
|
module.branch-dp-prod-sa.iam_email,
|
2022-01-19 05:17:20 -08:00
|
|
|
module.branch-network-sa.iam_email,
|
|
|
|
module.branch-security-sa.iam_email,
|
|
|
|
],
|
|
|
|
# enable if individual teams can create their own projects
|
|
|
|
# [
|
|
|
|
# for k, v in module.branch-teams-team-sa : v.iam_email
|
|
|
|
# ],
|
|
|
|
local.branch_teams_pf_sa_iam_emails
|
|
|
|
)
|
|
|
|
}
|
|
|
|
|
|
|
|
# billing account in same org (resources is in the organization.tf file)
|
|
|
|
|
|
|
|
# billing account in a different org
|
|
|
|
|
|
|
|
module "billing-organization-ext" {
|
|
|
|
source = "../../../modules/organization"
|
|
|
|
count = local.billing_org_ext ? 1 : 0
|
|
|
|
organization_id = "organizations/${var.billing_account.organization_id}"
|
|
|
|
iam_additive = {
|
|
|
|
"roles/billing.user" = local.billing_ext_users
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
# standalone billing account
|
|
|
|
|
|
|
|
resource "google_billing_account_iam_member" "billing_ext_admin" {
|
|
|
|
for_each = toset(
|
|
|
|
local.billing_ext ? local.billing_ext_users : []
|
|
|
|
)
|
|
|
|
billing_account_id = var.billing_account.id
|
|
|
|
role = "roles/billing.user"
|
|
|
|
member = each.key
|
|
|
|
}
|