2021-05-18 09:30:21 -07:00
|
|
|
/**
|
|
|
|
* Copyright 2020 Google LLC
|
|
|
|
*
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
*
|
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
*
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
|
|
|
*/
|
|
|
|
|
2021-06-05 07:05:39 -07:00
|
|
|
###############################################################################
|
|
|
|
# projects #
|
|
|
|
###############################################################################
|
|
|
|
|
|
|
|
module "project-datamart" {
|
|
|
|
source = "../../../modules/project"
|
|
|
|
parent = var.root_node
|
|
|
|
billing_account = var.billing_account_id
|
|
|
|
prefix = var.prefix
|
|
|
|
name = var.project_names.datamart
|
|
|
|
services = [
|
|
|
|
"bigquery.googleapis.com",
|
|
|
|
"bigquerystorage.googleapis.com",
|
|
|
|
"bigqueryreservation.googleapis.com",
|
2021-06-28 01:57:11 -07:00
|
|
|
"storage.googleapis.com",
|
2021-06-05 07:05:39 -07:00
|
|
|
"storage-component.googleapis.com",
|
|
|
|
]
|
|
|
|
iam = {
|
|
|
|
"roles/editor" = [module.sa-services-main.iam_email]
|
|
|
|
}
|
2021-06-25 04:06:19 -07:00
|
|
|
service_encryption_key_ids = {
|
|
|
|
bq = [var.service_encryption_key_ids.multiregional]
|
|
|
|
storage = [var.service_encryption_key_ids.multiregional]
|
|
|
|
}
|
2021-07-08 07:51:57 -07:00
|
|
|
# If used, remember to uncomment 'lifecycle' block in the
|
|
|
|
# modules/vpc-sc/google_access_context_manager_service_perimeter resource.
|
|
|
|
service_perimeter_standard = var.service_perimeter_standard
|
2021-06-05 07:05:39 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
module "project-dwh" {
|
|
|
|
source = "../../../modules/project"
|
|
|
|
parent = var.root_node
|
|
|
|
billing_account = var.billing_account_id
|
|
|
|
prefix = var.prefix
|
|
|
|
name = var.project_names.dwh
|
|
|
|
services = [
|
|
|
|
"bigquery.googleapis.com",
|
|
|
|
"bigquerystorage.googleapis.com",
|
|
|
|
"bigqueryreservation.googleapis.com",
|
2021-06-25 04:06:19 -07:00
|
|
|
"storage.googleapis.com",
|
2021-06-05 07:05:39 -07:00
|
|
|
"storage-component.googleapis.com",
|
|
|
|
]
|
|
|
|
iam = {
|
|
|
|
"roles/editor" = [module.sa-services-main.iam_email]
|
|
|
|
}
|
2021-06-25 04:06:19 -07:00
|
|
|
service_encryption_key_ids = {
|
|
|
|
bq = [var.service_encryption_key_ids.multiregional]
|
|
|
|
storage = [var.service_encryption_key_ids.multiregional]
|
|
|
|
}
|
2021-07-08 07:51:57 -07:00
|
|
|
# If used, remember to uncomment 'lifecycle' block in the
|
|
|
|
# modules/vpc-sc/google_access_context_manager_service_perimeter resource.
|
|
|
|
service_perimeter_standard = var.service_perimeter_standard
|
2021-06-05 07:05:39 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
module "project-landing" {
|
|
|
|
source = "../../../modules/project"
|
|
|
|
parent = var.root_node
|
|
|
|
billing_account = var.billing_account_id
|
|
|
|
prefix = var.prefix
|
|
|
|
name = var.project_names.landing
|
|
|
|
services = [
|
|
|
|
"pubsub.googleapis.com",
|
2021-06-25 04:06:19 -07:00
|
|
|
"storage.googleapis.com",
|
2021-06-05 07:05:39 -07:00
|
|
|
"storage-component.googleapis.com",
|
|
|
|
]
|
|
|
|
iam = {
|
|
|
|
"roles/editor" = [module.sa-services-main.iam_email]
|
|
|
|
}
|
2021-06-25 04:06:19 -07:00
|
|
|
service_encryption_key_ids = {
|
|
|
|
pubsub = [var.service_encryption_key_ids.global]
|
|
|
|
storage = [var.service_encryption_key_ids.multiregional]
|
|
|
|
}
|
2021-07-08 07:51:57 -07:00
|
|
|
# If used, remember to uncomment 'lifecycle' block in the
|
|
|
|
# modules/vpc-sc/google_access_context_manager_service_perimeter resource.
|
|
|
|
service_perimeter_standard = var.service_perimeter_standard
|
2021-05-18 09:30:21 -07:00
|
|
|
}
|
|
|
|
|
2021-06-05 07:05:39 -07:00
|
|
|
module "project-services" {
|
|
|
|
source = "../../../modules/project"
|
|
|
|
parent = var.root_node
|
|
|
|
billing_account = var.billing_account_id
|
|
|
|
prefix = var.prefix
|
|
|
|
name = var.project_names.services
|
|
|
|
services = [
|
2021-06-25 04:06:19 -07:00
|
|
|
"storage.googleapis.com",
|
2021-06-05 07:05:39 -07:00
|
|
|
"storage-component.googleapis.com",
|
|
|
|
"sourcerepo.googleapis.com",
|
|
|
|
"stackdriver.googleapis.com",
|
|
|
|
"cloudasset.googleapis.com",
|
2021-06-25 04:06:19 -07:00
|
|
|
"cloudkms.googleapis.com"
|
2021-06-05 07:05:39 -07:00
|
|
|
]
|
|
|
|
iam = {
|
|
|
|
"roles/editor" = [module.sa-services-main.iam_email]
|
|
|
|
}
|
2021-06-25 04:06:19 -07:00
|
|
|
service_encryption_key_ids = {
|
|
|
|
storage = [var.service_encryption_key_ids.multiregional]
|
|
|
|
}
|
2021-07-08 07:51:57 -07:00
|
|
|
# If used, remember to uncomment 'lifecycle' block in the
|
|
|
|
# modules/vpc-sc/google_access_context_manager_service_perimeter resource.
|
|
|
|
service_perimeter_standard = var.service_perimeter_standard
|
2021-06-05 07:05:39 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
module "project-transformation" {
|
|
|
|
source = "../../../modules/project"
|
|
|
|
parent = var.root_node
|
|
|
|
billing_account = var.billing_account_id
|
|
|
|
prefix = var.prefix
|
|
|
|
name = var.project_names.transformation
|
|
|
|
services = [
|
|
|
|
"cloudbuild.googleapis.com",
|
|
|
|
"compute.googleapis.com",
|
|
|
|
"dataflow.googleapis.com",
|
|
|
|
"servicenetworking.googleapis.com",
|
2021-06-25 04:06:19 -07:00
|
|
|
"storage.googleapis.com",
|
2021-06-05 07:05:39 -07:00
|
|
|
"storage-component.googleapis.com",
|
|
|
|
]
|
|
|
|
iam = {
|
|
|
|
"roles/editor" = [module.sa-services-main.iam_email]
|
|
|
|
}
|
2021-06-25 04:06:19 -07:00
|
|
|
service_encryption_key_ids = {
|
|
|
|
compute = [var.service_encryption_key_ids.global]
|
|
|
|
storage = [var.service_encryption_key_ids.multiregional]
|
|
|
|
dataflow = [var.service_encryption_key_ids.global]
|
|
|
|
}
|
2021-07-08 07:51:57 -07:00
|
|
|
# If used, remember to uncomment 'lifecycle' block in the
|
|
|
|
# modules/vpc-sc/google_access_context_manager_service_perimeter resource.
|
|
|
|
service_perimeter_standard = var.service_perimeter_standard
|
2021-06-05 07:05:39 -07:00
|
|
|
}
|
|
|
|
|
|
|
|
###############################################################################
|
|
|
|
# service accounts #
|
|
|
|
###############################################################################
|
|
|
|
|
|
|
|
module "sa-services-main" {
|
|
|
|
source = "../../../modules/iam-service-account"
|
|
|
|
project_id = module.project-services.project_id
|
|
|
|
name = var.service_account_names.main
|
2021-05-18 09:30:21 -07:00
|
|
|
}
|