zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

README tweaks

This commit is contained in:
Ludovico Magnocavallo 2022-02-21 20:41:40 +01:00
parent c74ea67987
commit c4b2f85a3b
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
fast/stages/00-bootstrap/README.md
View File

@ -118,6 +118,8 @@ for role in $FAST_ROLES; do
done
```
Then make sure the same user is also part of the `gcp-organization-admins` group so that impersonating the automation service account later on will be possible.
#### Billing account in a different organization
If you are using a billing account belonging to a different organization (e.g. in multiple organization setups), some initial configurations are needed to ensure the identities running this stage can assign billing-related roles.
@ -233,7 +235,7 @@ terraform apply \
-var bootstrap_user=$(gcloud config list --format 'value(core.account)')
```
Once the initial `apply` completes successfully, configure a remote backend using the new GCS bucket, and impersonation on the automation service account for this stage. To do this, you can use the generated `providers.tf` file if you have configured output files as described above, or extract its contents from Terraform's output, then migrate state with `terraform init`:
Once the initial `apply` completes successfully, configure a remote backend using the new GCS bucket, and impersonation on the automation service account for this stage. To do this you can use the generated `providers.tf` file if you have configured output files as described above, or extract its contents from Terraform's output, then migrate state with `terraform init`:
```bash
# if using output files via the outputs_location and set to `../../config`
@ -247,6 +249,8 @@ terraform init -migrate-state
terraform apply
```
Make sure the user you're logged in with is a member of the `gcp-organization-admins` group or impersonation will not be possible.
## Customizations
Most variables (e.g. `billing_account` and `organization`) are only used to input actual values and should be self-explanatory. The only meaningful customizations that apply here are groups, and IAM roles.