Add service account email to outputs to manage its permissions
This commit is contained in:
Wiktor Niesiobędzki
Wiktor Niesiobędzki
parent
724dfda09c
commit
1eea077460
|
|
@ -113,14 +113,14 @@ service_encryption_keys = {
|
|||
|
||||
| name | description | type | required | default |
|
||||
|---|---|:---:|:---:|:---:|
|
||||
| [prefix](variables.tf#L87) | Prefix used for resource names. | <code>string</code> | ✓ | |
|
||||
| [project_id](variables.tf#L105) | Project id, references existing project if `project_create` is null. | <code>string</code> | ✓ | |
|
||||
| [region](variables.tf#L110) | Region where instances will be deployed. | <code>string</code> | ✓ | |
|
||||
| [composer_config](variables.tf#L17) | Composer environment configuration. It accepts only following attributes: `environment_size`, `software_config` and `workloads_config`. See [attribute reference](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/composer_environment#argument-reference---cloud-composer-2) for details on settings variables. | <code title="object({ environment_size = optional(string) software_config = optional(any) workloads_config = optional(object({ scheduler = optional(object( { count = optional(number) cpu = optional(number) memory_gb = optional(number) storage_gb = optional(number) } )) triggerer = optional(object({ count = number cpu = number memory_gb = number })) web_server = optional(object( { cpu = optional(number) memory_gb = optional(number) storage_gb = optional(number) } )) worker = optional(object( { cpu = optional(number) memory_gb = optional(number) min_count = optional(number) max_count = optional(number) storage_gb = optional(number) } )) })) })">object({…})</code> | | <code title="{ environment_size = "ENVIRONMENT_SIZE_SMALL" software_config = { image_version = "composer-2-airflow-2" } }">{…}</code> |
|
||||
| [iam_bindings_additive](variables.tf#L62) | Map of Role => principal in IAM format (`group:foo@example.org`) to be added on the project. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||
| [network_config](variables.tf#L69) | Shared VPC network configurations to use. If null networks will be created in projects with preconfigured values. | <code title="object({ host_project = string network_self_link = string subnet_self_link = string composer_ip_ranges = object({ cloudsql = string gke_master = string }) composer_secondary_ranges = object({ pods = string services = string }) })">object({…})</code> | | <code>null</code> |
|
||||
| [project_create](variables.tf#L96) | Provide values if project creation is needed, uses existing project if null. Parent is in 'folders/nnn' or 'organizations/nnn' format. | <code title="object({ billing_account_id = string parent = string })">object({…})</code> | | <code>null</code> |
|
||||
| [service_encryption_keys](variables.tf#L115) | Cloud KMS keys to use to encrypt resources. Provide a key for each region in use. | <code>map(string)</code> | | <code>null</code> |
|
||||
| [prefix](variables.tf#L81) | Prefix used for resource names. | <code>string</code> | ✓ | |
|
||||
| [project_id](variables.tf#L99) | Project id, references existing project if `project_create` is null. | <code>string</code> | ✓ | |
|
||||
| [region](variables.tf#L104) | Region where instances will be deployed. | <code>string</code> | ✓ | |
|
||||
| [composer_config](variables.tf#L17) | Composer environment configuration. It accepts only following attributes: `environment_size`, `software_config` and `workloads_config`. See [attribute reference](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/composer_environment#argument-reference---cloud-composer-2) for details on settings variables. | <code title="object({ environment_size = optional(string) software_config = optional(any) workloads_config = optional(object({ scheduler = optional(object({ count = optional(number, 1) cpu = optional(number, 0.5) memory_gb = optional(number, 2) storage_gb = optional(number, 1) }), {}) triggerer = optional(object({ count = number cpu = number memory_gb = number })) web_server = optional(object({ cpu = optional(number, 0.5) memory_gb = optional(number, 2) storage_gb = optional(number, 1) }), {}) worker = optional(object({ cpu = optional(number, 0.5) memory_gb = optional(number, 2) min_count = optional(number, 1) max_count = optional(number, 3) storage_gb = optional(number, 1) }), {}) })) })">object({…})</code> | | <code title="{ environment_size = "ENVIRONMENT_SIZE_SMALL" software_config = { image_version = "composer-2-airflow-2" } }">{…}</code> |
|
||||
| [iam_bindings_additive](variables.tf#L56) | Map of Role => principal in IAM format (`group:foo@example.org`) to be added on the project. | <code>map(list(string))</code> | | <code>{}</code> |
|
||||
| [network_config](variables.tf#L63) | Shared VPC network configurations to use. If null networks will be created in projects with preconfigured values. | <code title="object({ host_project = string network_self_link = string subnet_self_link = string composer_ip_ranges = object({ cloudsql = string gke_master = string }) composer_secondary_ranges = object({ pods = string services = string }) })">object({…})</code> | | <code>null</code> |
|
||||
| [project_create](variables.tf#L90) | Provide values if project creation is needed, uses existing project if null. Parent is in 'folders/nnn' or 'organizations/nnn' format. | <code title="object({ billing_account_id = string parent = string })">object({…})</code> | | <code>null</code> |
|
||||
| [service_encryption_keys](variables.tf#L109) | Cloud KMS keys to use to encrypt resources. Provide a key for each region in use. | <code>map(string)</code> | | <code>null</code> |
|
||||
|
||||
## Outputs
|
||||
|
||||
|
|
@ -128,6 +128,7 @@ service_encryption_keys = {
|
|||
|---|---|:---:|
|
||||
| [composer_airflow_uri](outputs.tf#L17) | The URI of the Apache Airflow Web UI hosted within the Cloud Composer environment.. | |
|
||||
| [composer_dag_gcs](outputs.tf#L22) | The Cloud Storage prefix of the DAGs for the Cloud Composer environment. | |
|
||||
| [composer_service_account](outputs.tf#L27) | Cloud Composer nodes Service Account email | |
|
||||
<!-- END TFDOC -->
|
||||
## Test
|
||||
|
||||
|
|
|
|||
|
|
@ -23,3 +23,8 @@ output "composer_dag_gcs" {
|
|||
description = "The Cloud Storage prefix of the DAGs for the Cloud Composer environment."
|
||||
value = google_composer_environment.env.config[0].dag_gcs_prefix
|
||||
}
|
||||
|
||||
output "composer_service_account" {
|
||||
description = " Cloud Composer nodes Service Account email"
|
||||
value = module.comp-sa.email
|
||||
}
|
||||
Loading…
Reference in New Issue