Merge branch 'master' into lcaggio/fix-20221123

.github/labeler.yml

@@ -15,12 +15,12 @@
 'on:blueprints':
   - blueprints/**/*
 'on:documentation':
-  - '**/*.md'
+  - README.md
-  - assets/**/*
+  - */README.md
-  - tests/**/*
 'on:FAST':
   - fast/**/*
 'on:modules':
   - modules/**/*
 'on:tools':
   - tools/**/*
+  - .github/**/*

blueprints/cloud-operations/adfs/README.md

@@ -61,7 +61,7 @@ Once done testing, you can clean up resources by running `terraform destroy`.
 | [disk_type](variables.tf#L37) | Disk type. | <code>string</code> |  | <code>&#34;pd-ssd&#34;</code> |
 | [image](variables.tf#L43) | Image. | <code>string</code> |  | <code>&#34;projects&#47;windows-cloud&#47;global&#47;images&#47;family&#47;windows-2022&#34;</code> |
 | [instance_type](variables.tf#L49) | Instance type. | <code>string</code> |  | <code>&#34;n1-standard-2&#34;</code> |
-| [network_config](variables.tf#L55) | Network configuration | <code title="object&#40;&#123;&#10;  network &#61; string&#10;  subnet  &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [network_config](variables.tf#L55) | Network configuration. | <code title="object&#40;&#123;&#10;  network &#61; string&#10;  subnet  &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
 | [project_create](variables.tf#L73) | Parameters for the creation of the new project. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
 | [region](variables.tf#L87) | Region. | <code>string</code> |  | <code>&#34;europe-west1&#34;</code> |
 | [subnet_ip_cidr_block](variables.tf#L93) | Subnet IP CIDR block. | <code>string</code> |  | <code>&#34;10.0.1.0&#47;28&#34;</code> |

blueprints/cloud-operations/adfs/variables.tf

@@ -53,7 +53,7 @@ variable "instance_type" {
 }
 
 variable "network_config" {
-  description = "Network configuration"
+  description = "Network configuration."
   type = object({
     network = string
     subnet  = string

blueprints/cloud-operations/apigee/README.md

@@ -63,7 +63,7 @@ Do the following to verify that everything works as expected.
 | [instances](variables.tf#L46) | Instance. | <code title="map&#40;object&#40;&#123;&#10;  display_name         &#61; optional&#40;string&#41;&#10;  description          &#61; optional&#40;string&#41;&#10;  region               &#61; string&#10;  environments         &#61; list&#40;string&#41;&#10;  psa_ip_cidr_range    &#61; string&#10;  disk_encryption_key  &#61; optional&#40;string&#41;&#10;  consumer_accept_list &#61; optional&#40;list&#40;string&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> | ✓ |  |
 | [project_id](variables.tf#L92) | Project ID. | <code>string</code> | ✓ |  |
 | [psc_config](variables.tf#L98) | PSC configuration. | <code>map&#40;string&#41;</code> | ✓ |  |
-| [datastore_name](variables.tf#L17) | Datastore | <code>string</code> |  | <code>&#34;gcs&#34;</code> |
+| [datastore_name](variables.tf#L17) | Datastore. | <code>string</code> |  | <code>&#34;gcs&#34;</code> |
 | [organization](variables.tf#L60) | Apigee organization. | <code title="object&#40;&#123;&#10;  display_name            &#61; optional&#40;string, &#34;Apigee organization created by tf module&#34;&#41;&#10;  description             &#61; optional&#40;string, &#34;Apigee organization created by tf module&#34;&#41;&#10;  authorized_network      &#61; optional&#40;string, &#34;vpc&#34;&#41;&#10;  runtime_type            &#61; optional&#40;string, &#34;CLOUD&#34;&#41;&#10;  billing_type            &#61; optional&#40;string&#41;&#10;  database_encryption_key &#61; optional&#40;string&#41;&#10;  analytics_region        &#61; optional&#40;string, &#34;europe-west1&#34;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [path](variables.tf#L76) | Bucket path. | <code>string</code> |  | <code>&#34;&#47;analytics&#34;</code> |
 | [project_create](variables.tf#L83) | Parameters for the creation of the new project. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |

blueprints/cloud-operations/apigee/variables.tf

@@ -15,7 +15,7 @@
  */
 
 variable "datastore_name" {
-  description = "Datastore"
+  description = "Datastore."
   type        = string
   nullable    = false
   default     = "gcs"

blueprints/cloud-operations/network-dashboard/README.md

@@ -89,15 +89,15 @@ If you are interested in this and/or would like to contribute, please contact le
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [billing_account](variables.tf#L17) | The ID of the billing account to associate this project with | <code></code> | ✓ |  |
+| [billing_account](variables.tf#L17) | The ID of the billing account to associate this project with. | <code></code> | ✓ |  |
-| [monitored_projects_list](variables.tf#L36) | ID of the projects to be monitored (where limits and quotas data will be pulled) | <code>list&#40;string&#41;</code> | ✓ |  |
+| [monitored_projects_list](variables.tf#L36) | ID of the projects to be monitored (where limits and quotas data will be pulled). | <code>list&#40;string&#41;</code> | ✓ |  |
-| [organization_id](variables.tf#L46) | The organization id for the associated services | <code></code> | ✓ |  |
+| [organization_id](variables.tf#L46) | The organization id for the associated services. | <code></code> | ✓ |  |
 | [prefix](variables.tf#L50) | Prefix used for resource names. | <code>string</code> | ✓ |  |
 | [cf_version](variables.tf#L21) | Cloud Function version 2nd Gen or 1st Gen. Possible options: 'V1' or 'V2'.Use CFv2 if your Cloud Function timeouts after 9 minutes. By default it is using CFv1. | <code></code> |  | <code>V1</code> |
-| [monitored_folders_list](variables.tf#L30) | ID of the projects to be monitored (where limits and quotas data will be pulled) | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [monitored_folders_list](variables.tf#L30) | ID of the projects to be monitored (where limits and quotas data will be pulled). | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
-| [monitoring_project_id](variables.tf#L41) | Monitoring project where the dashboard will be created and the solution deployed; a project will be created if set to empty string | <code></code> |  |  |
+| [monitoring_project_id](variables.tf#L41) | Monitoring project where the dashboard will be created and the solution deployed; a project will be created if set to empty string. | <code></code> |  |  |
 | [project_monitoring_services](variables.tf#L59) | Service APIs enabled in the monitoring project if it will be created. | <code></code> |  | <code title="&#91;&#10;  &#34;artifactregistry.googleapis.com&#34;,&#10;  &#34;cloudasset.googleapis.com&#34;,&#10;  &#34;cloudbilling.googleapis.com&#34;,&#10;  &#34;cloudbuild.googleapis.com&#34;,&#10;  &#34;cloudfunctions.googleapis.com&#34;,&#10;  &#34;cloudresourcemanager.googleapis.com&#34;,&#10;  &#34;cloudscheduler.googleapis.com&#34;,&#10;  &#34;compute.googleapis.com&#34;,&#10;  &#34;iam.googleapis.com&#34;,&#10;  &#34;iamcredentials.googleapis.com&#34;,&#10;  &#34;logging.googleapis.com&#34;,&#10;  &#34;monitoring.googleapis.com&#34;,&#10;  &#34;pubsub.googleapis.com&#34;,&#10;  &#34;run.googleapis.com&#34;,&#10;  &#34;servicenetworking.googleapis.com&#34;,&#10;  &#34;serviceusage.googleapis.com&#34;,&#10;  &#34;storage-component.googleapis.com&#34;&#10;&#93;">&#91;&#8230;&#93;</code> |
-| [region](variables.tf#L81) | Region used to deploy the cloud functions and scheduler | <code></code> |  | <code>europe-west1</code> |
+| [region](variables.tf#L81) | Region used to deploy the cloud functions and scheduler. | <code></code> |  | <code>europe-west1</code> |
 | [schedule_cron](variables.tf#L86) | Cron format schedule to run the Cloud Function. Default is every 10 minutes. | <code></code> |  | <code>&#42;&#47;10 &#42; &#42; &#42; &#42;</code> |
 
 <!-- END TFDOC -->

blueprints/cloud-operations/network-dashboard/variables.tf

@@ -15,7 +15,7 @@
  */
 
 variable "billing_account" {
-  description = "The ID of the billing account to associate this project with"
+  description = "The ID of the billing account to associate this project with."
 }
 
 variable "cf_version" {
@@ -29,22 +29,22 @@ variable "cf_version" {
 
 variable "monitored_folders_list" {
   type        = list(string)
-  description = "ID of the projects to be monitored (where limits and quotas data will be pulled)"
+  description = "ID of the projects to be monitored (where limits and quotas data will be pulled)."
   default     = []
 }
 
 variable "monitored_projects_list" {
   type        = list(string)
-  description = "ID of the projects to be monitored (where limits and quotas data will be pulled)"
+  description = "ID of the projects to be monitored (where limits and quotas data will be pulled)."
 }
 
 variable "monitoring_project_id" {
-  description = "Monitoring project where the dashboard will be created and the solution deployed; a project will be created if set to empty string"
+  description = "Monitoring project where the dashboard will be created and the solution deployed; a project will be created if set to empty string."
   default     = ""
 }
 
 variable "organization_id" {
-  description = "The organization id for the associated services"
+  description = "The organization id for the associated services."
 }
 
 variable "prefix" {
@@ -79,7 +79,7 @@ variable "project_monitoring_services" {
   ]
 }
 variable "region" {
-  description = "Region used to deploy the cloud functions and scheduler"
+  description = "Region used to deploy the cloud functions and scheduler."
   default     = "europe-west1"
 }
 

blueprints/cloud-operations/terraform-enterprise-wif/tfc-workflow-using-wif/tfc-oidc/README.md

@@ -35,6 +35,6 @@ provider "google-beta" {
 
 | name | description | sensitive |
 |---|---|:---:|
-| [credentials](outputs.tf#L17) |  |  |
+| [credentials](outputs.tf#L17) | Credentials in format to pass the to gcp provider. |  |
 
 <!-- END TFDOC -->

blueprints/cloud-operations/terraform-enterprise-wif/tfc-workflow-using-wif/tfc-oidc/outputs.tf

@@ -15,6 +15,7 @@
  */
 
 output "credentials" {
+  description = "Credentials in format to pass the to gcp provider."
   value = jsonencode({
     "type" : "external_account",
     "audience" : "${local.audience}",

blueprints/cloud-operations/vm-migration/esxi/README.md

@@ -22,11 +22,11 @@ This sample creates several distinct groups of resources:
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [m4ce_ssh_public_key](variables.tf#L43) | Filesystem path to the public key for the SSH login | <code>string</code> | ✓ |  |
+| [m4ce_ssh_public_key](variables.tf#L43) | Filesystem path to the public key for the SSH login. | <code>string</code> | ✓ |  |
 | [vcenter_password](variables.tf#L48) | VCenter user password. | <code>string</code> | ✓ |  |
-| [vsphere_environment](variables.tf#L53) | VMVware VSphere connection parameters | <code title="object&#40;&#123;&#10;  vcenter_ip    &#61; string&#10;  vcenter_user  &#61; string&#10;  data_center   &#61; string&#10;  resource_pool &#61; string&#10;  host_ip       &#61; string&#10;  datastore     &#61; string&#10;  virtual_net   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  |
+| [vsphere_environment](variables.tf#L53) | VMVware VSphere connection parameters. | <code title="object&#40;&#123;&#10;  vcenter_ip    &#61; string&#10;  vcenter_user  &#61; string&#10;  data_center   &#61; string&#10;  resource_pool &#61; string&#10;  host_ip       &#61; string&#10;  datastore     &#61; string&#10;  virtual_net   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  |
-| [m4ce_appliance_properties](variables.tf#L15) | M4CE connector OVA image configuration parameters | <code title="object&#40;&#123;&#10;  hostname &#61; string&#10;  ip0      &#61; string&#10;  netmask0 &#61; string&#10;  gateway  &#61; string&#10;  DNS      &#61; string&#10;  proxy    &#61; string&#10;  route0   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  &#34;hostname&#34; &#61; &#34;gcp-m4ce-connector&#34;&#10;  &#34;ip0&#34;      &#61; &#34;0.0.0.0&#34;&#10;  &#34;netmask0&#34; &#61; &#34;0.0.0.0&#34;&#10;  &#34;gateway&#34;  &#61; &#34;0.0.0.0&#34;&#10;  &#34;DNS&#34;      &#61; &#34;&#34;&#10;  &#34;proxy&#34;    &#61; &#34;&#34;&#10;  &#34;route0&#34;   &#61; &#34;&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [m4ce_appliance_properties](variables.tf#L15) | M4CE connector OVA image configuration parameters. | <code title="object&#40;&#123;&#10;  hostname &#61; string&#10;  ip0      &#61; string&#10;  netmask0 &#61; string&#10;  gateway  &#61; string&#10;  DNS      &#61; string&#10;  proxy    &#61; string&#10;  route0   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  &#34;hostname&#34; &#61; &#34;gcp-m4ce-connector&#34;&#10;  &#34;ip0&#34;      &#61; &#34;0.0.0.0&#34;&#10;  &#34;netmask0&#34; &#61; &#34;0.0.0.0&#34;&#10;  &#34;gateway&#34;  &#61; &#34;0.0.0.0&#34;&#10;  &#34;DNS&#34;      &#61; &#34;&#34;&#10;  &#34;proxy&#34;    &#61; &#34;&#34;&#10;  &#34;route0&#34;   &#61; &#34;&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [m4ce_connector_ovf_url](variables.tf#L37) | http URL to the public M4CE connector OVA image | <code>string</code> |  | <code>&#34;https:&#47;&#47;storage.googleapis.com&#47;vmmigration-public-artifacts&#47;migrate-connector-2-0-1663.ova&#34;</code> |
+| [m4ce_connector_ovf_url](variables.tf#L37) | http URL to the public M4CE connector OVA image. | <code>string</code> |  | <code>&#34;https:&#47;&#47;storage.googleapis.com&#47;vmmigration-public-artifacts&#47;migrate-connector-2-0-1663.ova&#34;</code> |
 
 <!-- END TFDOC -->
 ## Manual Steps

blueprints/cloud-operations/vm-migration/esxi/variables.tf

@@ -13,7 +13,7 @@
 # limitations under the License.
 
 variable "m4ce_appliance_properties" {
-  description = "M4CE connector OVA image configuration parameters"
+  description = "M4CE connector OVA image configuration parameters."
   type = object({
     hostname = string
     ip0      = string
@@ -35,13 +35,13 @@ variable "m4ce_appliance_properties" {
 }
 
 variable "m4ce_connector_ovf_url" {
-  description = "http URL to the public M4CE connector OVA image"
+  description = "http URL to the public M4CE connector OVA image."
   type        = string
   default     = "https://storage.googleapis.com/vmmigration-public-artifacts/migrate-connector-2-0-1663.ova"
 }
 
 variable "m4ce_ssh_public_key" {
-  description = "Filesystem path to the public key for the SSH login"
+  description = "Filesystem path to the public key for the SSH login."
   type        = string
 }
 
@@ -51,7 +51,7 @@ variable "vcenter_password" {
 }
 
 variable "vsphere_environment" {
-  description = "VMVware VSphere connection parameters"
+  description = "VMVware VSphere connection parameters."
   type = object({
     vcenter_ip    = string
     vcenter_user  = string

blueprints/cloud-operations/vm-migration/host-target-projects/README.md

@@ -25,16 +25,16 @@ This sample creates\updates several distinct groups of resources:
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format | <code>list&#40;string&#41;</code> | ✓ |  |
+| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [migration_target_projects](variables.tf#L20) | List of target projects for m4ce workload migrations | <code>list&#40;string&#41;</code> | ✓ |  |
+| [migration_target_projects](variables.tf#L20) | List of target projects for m4ce workload migrations. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [migration_viewer_users](variables.tf#L25) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [migration_viewer_users](variables.tf#L25) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
-| [project_create](variables.tf#L31) | Parameters for the creation of the new project to host the M4CE backend | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [project_create](variables.tf#L31) | Parameters for the creation of the new project to host the M4CE backend. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [project_name](variables.tf#L40) | Name of an existing project or of the new project assigned as M4CE host project | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
+| [project_name](variables.tf#L40) | Name of an existing project or of the new project assigned as M4CE host project. | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
 
 ## Outputs
 
 | name | description | sensitive |
 |---|---|:---:|
-| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration.. It is used by M4CE to perform activities on target projects |  |
+| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration.. It is used by M4CE to perform activities on target projects. |  |
 
 <!-- END TFDOC -->

blueprints/cloud-operations/vm-migration/host-target-projects/outputs.tf

@@ -13,6 +13,6 @@
 # limitations under the License.
 
 output "m4ce_gmanaged_service_account" {
-  description = "Google managed service account created automatically during the migrate connector registration.. It is used by M4CE to perform activities on target projects"
+  description = "Google managed service account created automatically during the migrate connector registration.. It is used by M4CE to perform activities on target projects."
   value       = "serviceAccount:service-${module.host-project.number}@gcp-sa-vmmigration.iam.gserviceaccount.com"
 }

blueprints/cloud-operations/vm-migration/host-target-projects/variables.tf

@@ -13,23 +13,23 @@
 # limitations under the License.
 
 variable "migration_admin_users" {
-  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format"
+  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format."
   type        = list(string)
 }
 
 variable "migration_target_projects" {
-  description = "List of target projects for m4ce workload migrations"
+  description = "List of target projects for m4ce workload migrations."
   type        = list(string)
 }
 
 variable "migration_viewer_users" {
-  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format"
+  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format."
   type        = list(string)
   default     = []
 }
 
 variable "project_create" {
-  description = "Parameters for the creation of the new project to host the M4CE backend"
+  description = "Parameters for the creation of the new project to host the M4CE backend."
   type = object({
     billing_account_id = string
     parent             = string
@@ -38,7 +38,7 @@ variable "project_create" {
 }
 
 variable "project_name" {
-  description = "Name of an existing project or of the new project assigned as M4CE host project"
+  description = "Name of an existing project or of the new project assigned as M4CE host project."
   type        = string
   default     = "m4ce-host-project-000"
 }

blueprints/cloud-operations/vm-migration/host-target-sharedvpc/README.md

@@ -26,18 +26,18 @@ This sample creates\update several distinct groups of resources:
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format | <code>list&#40;string&#41;</code> | ✓ |  |
+| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [migration_target_projects](variables.tf#L20) | List of target projects for m4ce workload migrations | <code>list&#40;string&#41;</code> | ✓ |  |
+| [migration_target_projects](variables.tf#L20) | List of target projects for m4ce workload migrations. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [sharedvpc_host_projects](variables.tf#L45) | List of host projects that share a VPC with the selected target projects | <code>list&#40;string&#41;</code> | ✓ |  |
+| [sharedvpc_host_projects](variables.tf#L45) | List of host projects that share a VPC with the selected target projects. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [migration_viewer_users](variables.tf#L25) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [migration_viewer_users](variables.tf#L25) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
-| [project_create](variables.tf#L30) | Parameters for the creation of the new project to host the M4CE backend | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [project_create](variables.tf#L30) | Parameters for the creation of the new project to host the M4CE backend. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [project_name](variables.tf#L39) | Name of an existing project or of the new project assigned as M4CE host project | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
+| [project_name](variables.tf#L39) | Name of an existing project or of the new project assigned as M4CE host project. | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
 
 ## Outputs
 
 | name | description | sensitive |
 |---|---|:---:|
-| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects |  |
+| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects. |  |
 
 <!-- END TFDOC -->
 ## Manual Steps

blueprints/cloud-operations/vm-migration/host-target-sharedvpc/outputs.tf

@@ -13,6 +13,6 @@
 # limitations under the License.
 
 output "m4ce_gmanaged_service_account" {
-  description = "Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects"
+  description = "Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects."
   value       = "serviceAccount:service-${module.host-project.number}@gcp-sa-vmmigration.iam.gserviceaccount.com"
 }

blueprints/cloud-operations/vm-migration/host-target-sharedvpc/variables.tf

@@ -13,22 +13,22 @@
 # limitations under the License.
 
 variable "migration_admin_users" {
-  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format"
+  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format."
   type        = list(string)
 }
 
 variable "migration_target_projects" {
-  description = "List of target projects for m4ce workload migrations"
+  description = "List of target projects for m4ce workload migrations."
   type        = list(string)
 }
 
 variable "migration_viewer_users" {
-  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format"
+  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format."
   type        = list(string)
   default     = []
 }
 variable "project_create" {
-  description = "Parameters for the creation of the new project to host the M4CE backend"
+  description = "Parameters for the creation of the new project to host the M4CE backend."
   type = object({
     billing_account_id = string
     parent             = string
@@ -37,12 +37,12 @@ variable "project_create" {
 }
 
 variable "project_name" {
-  description = "Name of an existing project or of the new project assigned as M4CE host project"
+  description = "Name of an existing project or of the new project assigned as M4CE host project."
   type        = string
   default     = "m4ce-host-project-000"
 }
 
 variable "sharedvpc_host_projects" {
-  description = "List of host projects that share a VPC with the selected target projects"
+  description = "List of host projects that share a VPC with the selected target projects."
   type        = list(string)
 }

blueprints/cloud-operations/vm-migration/single-project/README.md

@@ -26,16 +26,16 @@ This sample creates several distinct groups of resources:
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format | <code>list&#40;string&#41;</code> | ✓ |  |
+| [migration_admin_users](variables.tf#L15) | List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format. | <code>list&#40;string&#41;</code> | ✓ |  |
-| [migration_viewer_users](variables.tf#L20) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
+| [migration_viewer_users](variables.tf#L20) | List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
-| [project_create](variables.tf#L26) | Parameters for the creation of the new project to host the M4CE backend | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [project_create](variables.tf#L26) | Parameters for the creation of the new project to host the M4CE backend. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [project_name](variables.tf#L35) | Name of an existing project or of the new project assigned as M4CE host an target project | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
+| [project_name](variables.tf#L35) | Name of an existing project or of the new project assigned as M4CE host an target project. | <code>string</code> |  | <code>&#34;m4ce-host-project-000&#34;</code> |
-| [vpc_config](variables.tf#L41) | Parameters to create a simple VPC on the M4CE project | <code title="object&#40;&#123;&#10;  ip_cidr_range &#61; string,&#10;  region        &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  ip_cidr_range &#61; &#34;10.200.0.0&#47;20&#34;,&#10;  region        &#61; &#34;us-west2&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [vpc_config](variables.tf#L41) | Parameters to create a simple VPC on the M4CE project. | <code title="object&#40;&#123;&#10;  ip_cidr_range &#61; string,&#10;  region        &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  ip_cidr_range &#61; &#34;10.200.0.0&#47;20&#34;,&#10;  region        &#61; &#34;us-west2&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 
 ## Outputs
 
 | name | description | sensitive |
 |---|---|:---:|
-| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects |  |
+| [m4ce_gmanaged_service_account](outputs.tf#L15) | Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects. |  |
 
 <!-- END TFDOC -->

blueprints/cloud-operations/vm-migration/single-project/outputs.tf

@@ -13,6 +13,6 @@
 # limitations under the License.
 
 output "m4ce_gmanaged_service_account" {
-  description = "Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects"
+  description = "Google managed service account created automatically during the migrate connector registration. It is used by M4CE to perform activities on target projects."
   value       = "serviceAccount:service-${module.landing-project.number}@gcp-sa-vmmigration.iam.gserviceaccount.com"
 }

blueprints/cloud-operations/vm-migration/single-project/variables.tf

@@ -13,18 +13,18 @@
 # limitations under the License.
 
 variable "migration_admin_users" {
-  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format"
+  description = "List of users authorized to create a new M4CE sources and perform all other migration operations, in IAM format."
   type        = list(string)
 }
 
 variable "migration_viewer_users" {
-  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format"
+  description = "List of users authorized to retrive information about M4CE in the Google Cloud Console, in IAM format."
   type        = list(string)
   default     = []
 }
 
 variable "project_create" {
-  description = "Parameters for the creation of the new project to host the M4CE backend"
+  description = "Parameters for the creation of the new project to host the M4CE backend."
   type = object({
     billing_account_id = string
     parent             = string
@@ -33,13 +33,13 @@ variable "project_create" {
 }
 
 variable "project_name" {
-  description = "Name of an existing project or of the new project assigned as M4CE host an target project"
+  description = "Name of an existing project or of the new project assigned as M4CE host an target project."
   type        = string
   default     = "m4ce-host-project-000"
 }
 
 variable "vpc_config" {
-  description = "Parameters to create a simple VPC on the M4CE project"
+  description = "Parameters to create a simple VPC on the M4CE project."
   type = object({
     ip_cidr_range = string,
     region        = string

blueprints/data-solutions/cloudsql-multiregion/README.md

@@ -151,7 +151,7 @@ The above command will delete the associated resources so there will be no billa
 | [project_create](variables.tf#L54) | Provide values if project creation is needed, uses existing project if null. Parent is in 'folders/nnn' or 'organizations/nnn' format. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
 | [regions](variables.tf#L68) | Map of instance_name => location where instances will be deployed. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  primary &#61; &#34;europe-west1&#34;&#10;  replica &#61; &#34;europe-west3&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [service_encryption_keys](variables.tf#L81) | Cloud KMS keys to use to encrypt resources. Provide a key for each reagion configured. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
-| [sql_configuration](variables.tf#L87) | Cloud SQL configuration | <code title="object&#40;&#123;&#10;  availability_type &#61; string&#10;  database_version  &#61; string&#10;  psa_range         &#61; string&#10;  tier              &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  availability_type &#61; &#34;REGIONAL&#34;&#10;  database_version  &#61; &#34;POSTGRES_13&#34;&#10;  psa_range         &#61; &#34;10.60.0.0&#47;16&#34;&#10;  tier              &#61; &#34;db-g1-small&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [sql_configuration](variables.tf#L87) | Cloud SQL configuration. | <code title="object&#40;&#123;&#10;  availability_type &#61; string&#10;  database_version  &#61; string&#10;  psa_range         &#61; string&#10;  tier              &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  availability_type &#61; &#34;REGIONAL&#34;&#10;  database_version  &#61; &#34;POSTGRES_13&#34;&#10;  psa_range         &#61; &#34;10.60.0.0&#47;16&#34;&#10;  tier              &#61; &#34;db-g1-small&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 
 ## Outputs
 

blueprints/data-solutions/cloudsql-multiregion/variables.tf

@@ -85,7 +85,7 @@ variable "service_encryption_keys" {
 }
 
 variable "sql_configuration" {
-  description = "Cloud SQL configuration"
+  description = "Cloud SQL configuration."
   type = object({
     availability_type = string
     database_version  = string

blueprints/data-solutions/data-playground/README.md

@@ -50,7 +50,7 @@ You can now connect to the Vertex AI notbook to perform your data analysy.
 | [prefix](variables.tf#L22) | Prefix used for resource names. | <code>string</code> | ✓ |  |
 | [project_id](variables.tf#L40) | Project id, references existing project if `project_create` is null. | <code>string</code> | ✓ |  |
 | [location](variables.tf#L16) | The location where resources will be deployed. | <code>string</code> |  | <code>&#34;EU&#34;</code> |
-| [project_create](variables.tf#L31) | Provide values if project creation is needed, uses existing project if null. Parent format:  folders/folder_id or organizations/org_id | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [project_create](variables.tf#L31) | Provide values if project creation is needed, uses existing project if null. Parent format:  folders/folder_id or organizations/org_id. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
 | [region](variables.tf#L45) | The region where resources will be deployed. | <code>string</code> |  | <code>&#34;europe-west1&#34;</code> |
 | [vpc_config](variables.tf#L61) | Parameters to create a VPC. | <code title="object&#40;&#123;&#10;  ip_cidr_range &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  ip_cidr_range &#61; &#34;10.0.0.0&#47;20&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 
@@ -61,7 +61,7 @@ You can now connect to the Vertex AI notbook to perform your data analysy.
 | [bucket](outputs.tf#L15) | GCS Bucket URL. |  |
 | [dataset](outputs.tf#L20) | GCS Bucket URL. |  |
 | [notebook](outputs.tf#L25) | Vertex AI notebook details. |  |
-| [project](outputs.tf#L33) | Project id |  |
+| [project](outputs.tf#L33) | Project id. |  |
-| [vpc](outputs.tf#L38) | VPC Network |  |
+| [vpc](outputs.tf#L38) | VPC Network. |  |
 
 <!-- END TFDOC -->

blueprints/data-solutions/data-playground/outputs.tf

@@ -31,11 +31,11 @@ output "notebook" {
 }
 
 output "project" {
-  description = "Project id"
+  description = "Project id."
   value       = module.project.project_id
 }
 
 output "vpc" {
-  description = "VPC Network"
+  description = "VPC Network."
   value       = module.vpc.name
 }

blueprints/data-solutions/data-playground/variables.tf

@@ -29,7 +29,7 @@ variable "prefix" {
 }
 
 variable "project_create" {
-  description = "Provide values if project creation is needed, uses existing project if null. Parent format:  folders/folder_id or organizations/org_id"
+  description = "Provide values if project creation is needed, uses existing project if null. Parent format:  folders/folder_id or organizations/org_id."
   type = object({
     billing_account_id = string
     parent             = string

blueprints/data-solutions/sqlserver-alwayson/README.md

@@ -35,37 +35,37 @@ and to `C:\GcpSetupLog.txt` file.
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [ad_domain_fqdn](variables.tf#L15) | Active Directory domain (FQDN) | <code>string</code> | ✓ |  |
+| [ad_domain_fqdn](variables.tf#L15) | Active Directory domain (FQDN). | <code>string</code> | ✓ |  |
-| [ad_domain_netbios](variables.tf#L24) | Active Directory domain (NetBIOS) | <code>string</code> | ✓ |  |
+| [ad_domain_netbios](variables.tf#L24) | Active Directory domain (NetBIOS). | <code>string</code> | ✓ |  |
-| [network](variables.tf#L90) | Network to use in the project | <code>string</code> | ✓ |  |
+| [network](variables.tf#L90) | Network to use in the project. | <code>string</code> | ✓ |  |
 | [prefix](variables.tf#L113) | Prefix used for resource names. | <code>string</code> | ✓ |  |
-| [project_id](variables.tf#L131) | Google Cloud project ID | <code>string</code> | ✓ |  |
+| [project_id](variables.tf#L131) | Google Cloud project ID. | <code>string</code> | ✓ |  |
-| [sql_admin_password](variables.tf#L148) | Password for the SQL admin user to be created | <code>string</code> | ✓ |  |
+| [sql_admin_password](variables.tf#L148) | Password for the SQL admin user to be created. | <code>string</code> | ✓ |  |
-| [subnetwork](variables.tf#L163) | Subnetwork to use in the project | <code>string</code> | ✓ |  |
+| [subnetwork](variables.tf#L163) | Subnetwork to use in the project. | <code>string</code> | ✓ |  |
-| [always_on_groups](variables.tf#L33) | List of Always On Groups | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;bookshelf&#34;&#93;</code> |
+| [always_on_groups](variables.tf#L33) | List of Always On Groups. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;bookshelf&#34;&#93;</code> |
-| [boot_disk_size](variables.tf#L39) | Boot disk size in GB | <code>number</code> |  | <code>50</code> |
+| [boot_disk_size](variables.tf#L39) | Boot disk size in GB. | <code>number</code> |  | <code>50</code> |
-| [cluster_name](variables.tf#L45) | Cluster name (prepended with prefix) | <code>string</code> |  | <code>&#34;cluster&#34;</code> |
+| [cluster_name](variables.tf#L45) | Cluster name (prepended with prefix). | <code>string</code> |  | <code>&#34;cluster&#34;</code> |
-| [data_disk_size](variables.tf#L51) | Database disk size in GB | <code>number</code> |  | <code>200</code> |
+| [data_disk_size](variables.tf#L51) | Database disk size in GB. | <code>number</code> |  | <code>200</code> |
-| [health_check_config](variables.tf#L57) | Health check configuration | <code title="object&#40;&#123; check_interval_sec &#61; number,&#10;  healthy_threshold   &#61; number,&#10;  unhealthy_threshold &#61; number,&#10;  timeout_sec         &#61; number,&#10;&#125;&#41;">&#8230;</code> |  | <code title="&#123;&#10;  check_interval_sec  &#61; 2&#10;  healthy_threshold   &#61; 1&#10;  unhealthy_threshold &#61; 2&#10;  timeout_sec         &#61; 1&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [health_check_config](variables.tf#L57) | Health check configuration. | <code title="object&#40;&#123; check_interval_sec &#61; number,&#10;  healthy_threshold   &#61; number,&#10;  unhealthy_threshold &#61; number,&#10;  timeout_sec         &#61; number,&#10;&#125;&#41;">&#8230;</code> |  | <code title="&#123;&#10;  check_interval_sec  &#61; 2&#10;  healthy_threshold   &#61; 1&#10;  unhealthy_threshold &#61; 2&#10;  timeout_sec         &#61; 1&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [health_check_port](variables.tf#L72) | Health check port | <code>number</code> |  | <code>59997</code> |
+| [health_check_port](variables.tf#L72) | Health check port. | <code>number</code> |  | <code>59997</code> |
-| [health_check_ranges](variables.tf#L78) | Health check ranges | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;35.191.0.0&#47;16&#34;, &#34;209.85.152.0&#47;22&#34;, &#34;209.85.204.0&#47;22&#34;&#93;</code> |
+| [health_check_ranges](variables.tf#L78) | Health check ranges. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;35.191.0.0&#47;16&#34;, &#34;209.85.152.0&#47;22&#34;, &#34;209.85.204.0&#47;22&#34;&#93;</code> |
-| [managed_ad_dn](variables.tf#L84) | Managed Active Directory domain (eg. OU=Cloud,DC=example,DC=com) | <code>string</code> |  | <code>&#34;&#34;</code> |
+| [managed_ad_dn](variables.tf#L84) | Managed Active Directory domain (eg. OU=Cloud,DC=example,DC=com). | <code>string</code> |  | <code>&#34;&#34;</code> |
-| [node_image](variables.tf#L95) | SQL Server node machine image | <code>string</code> |  | <code>&#34;projects&#47;windows-sql-cloud&#47;global&#47;images&#47;family&#47;sql-ent-2019-win-2019&#34;</code> |
+| [node_image](variables.tf#L95) | SQL Server node machine image. | <code>string</code> |  | <code>&#34;projects&#47;windows-sql-cloud&#47;global&#47;images&#47;family&#47;sql-ent-2019-win-2019&#34;</code> |
-| [node_instance_type](variables.tf#L101) | SQL Server database node instance type | <code>string</code> |  | <code>&#34;n2-standard-8&#34;</code> |
+| [node_instance_type](variables.tf#L101) | SQL Server database node instance type. | <code>string</code> |  | <code>&#34;n2-standard-8&#34;</code> |
-| [node_name](variables.tf#L107) | Node base name | <code>string</code> |  | <code>&#34;node&#34;</code> |
+| [node_name](variables.tf#L107) | Node base name. | <code>string</code> |  | <code>&#34;node&#34;</code> |
 | [project_create](variables.tf#L122) | Provide values if project creation is needed, uses existing project if null. Parent is in 'folders/nnn' or 'organizations/nnn' format. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [region](variables.tf#L136) | Region for resources | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
+| [region](variables.tf#L136) | Region for resources. | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
-| [shared_vpc_project_id](variables.tf#L142) | Shared VPC project ID for firewall rules | <code>string</code> |  | <code>null</code> |
+| [shared_vpc_project_id](variables.tf#L142) | Shared VPC project ID for firewall rules. | <code>string</code> |  | <code>null</code> |
-| [sql_client_cidrs](variables.tf#L157) | CIDR ranges that are allowed to connect to SQL Server | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;0.0.0.0&#47;0&#34;&#93;</code> |
+| [sql_client_cidrs](variables.tf#L157) | CIDR ranges that are allowed to connect to SQL Server. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#34;0.0.0.0&#47;0&#34;&#93;</code> |
 | [vpc_ip_cidr_range](variables.tf#L168) | Ip range used in the subnet deployef in the Service Project. | <code>string</code> |  | <code>&#34;10.0.0.0&#47;20&#34;</code> |
-| [witness_image](variables.tf#L174) | SQL Server witness machine image | <code>string</code> |  | <code>&#34;projects&#47;windows-cloud&#47;global&#47;images&#47;family&#47;windows-2019&#34;</code> |
+| [witness_image](variables.tf#L174) | SQL Server witness machine image. | <code>string</code> |  | <code>&#34;projects&#47;windows-cloud&#47;global&#47;images&#47;family&#47;windows-2019&#34;</code> |
-| [witness_instance_type](variables.tf#L180) | SQL Server witness node instance type | <code>string</code> |  | <code>&#34;n2-standard-2&#34;</code> |
+| [witness_instance_type](variables.tf#L180) | SQL Server witness node instance type. | <code>string</code> |  | <code>&#34;n2-standard-2&#34;</code> |
-| [witness_name](variables.tf#L186) | Witness base name | <code>string</code> |  | <code>&#34;witness&#34;</code> |
+| [witness_name](variables.tf#L186) | Witness base name. | <code>string</code> |  | <code>&#34;witness&#34;</code> |
 
 ## Outputs
 
 | name | description | sensitive |
 |---|---|:---:|
-| [instructions](outputs.tf#L19) |  |  |
+| [instructions](outputs.tf#L19) | List of steps to follow after applying. |  |
 
 <!-- END TFDOC -->

blueprints/data-solutions/sqlserver-alwayson/outputs.tf

@@ -17,7 +17,8 @@ locals {
 }
 
 output "instructions" {
-  value = <<EOF
+  description = "List of steps to follow after applying."
+  value       = <<EOF
         Log-in to all 3 instances with Administrator credentials and run the following PowerShell command:
 
         Add-Computer -Domain ${var.ad_domain_fqdn} -Restart
@@ -28,4 +29,4 @@ output "instructions" {
         Follow the instructions from here: https://cloud.google.com/compute/docs/instances/sql-server/configure-availability#creating_an_availability_group
         Use the following listener IP addresses for: ${join(", ", local.loadbalancer_outputs)}
     EOF
-}
+}

blueprints/data-solutions/sqlserver-alwayson/variables.tf

@@ -13,7 +13,7 @@
 # limitations under the License.
 
 variable "ad_domain_fqdn" {
-  description = "Active Directory domain (FQDN)"
+  description = "Active Directory domain (FQDN)."
   type        = string
   validation {
     condition     = length(var.ad_domain_fqdn) > 0
@@ -22,7 +22,7 @@ variable "ad_domain_fqdn" {
 }
 
 variable "ad_domain_netbios" {
-  description = "Active Directory domain (NetBIOS)"
+  description = "Active Directory domain (NetBIOS)."
   type        = string
   validation {
     condition     = length(var.ad_domain_netbios) > 0
@@ -31,31 +31,31 @@ variable "ad_domain_netbios" {
 }
 
 variable "always_on_groups" {
-  description = "List of Always On Groups"
+  description = "List of Always On Groups."
   type        = list(string)
   default     = ["bookshelf"]
 }
 
 variable "boot_disk_size" {
-  description = "Boot disk size in GB"
+  description = "Boot disk size in GB."
   type        = number
   default     = 50
 }
 
 variable "cluster_name" {
-  description = "Cluster name (prepended with prefix)"
+  description = "Cluster name (prepended with prefix)."
   type        = string
   default     = "cluster"
 }
 
 variable "data_disk_size" {
-  description = "Database disk size in GB"
+  description = "Database disk size in GB."
   type        = number
   default     = 200
 }
 
 variable "health_check_config" {
-  description = "Health check configuration"
+  description = "Health check configuration."
   type = object({ check_interval_sec = number,
     healthy_threshold   = number,
     unhealthy_threshold = number,
@@ -70,42 +70,42 @@ variable "health_check_config" {
 }
 
 variable "health_check_port" {
-  description = "Health check port"
+  description = "Health check port."
   type        = number
   default     = 59997
 }
 
 variable "health_check_ranges" {
-  description = "Health check ranges"
+  description = "Health check ranges."
   type        = list(string)
   default     = ["35.191.0.0/16", "209.85.152.0/22", "209.85.204.0/22"]
 }
 
 variable "managed_ad_dn" {
-  description = "Managed Active Directory domain (eg. OU=Cloud,DC=example,DC=com)"
+  description = "Managed Active Directory domain (eg. OU=Cloud,DC=example,DC=com)."
   type        = string
   default     = ""
 }
 
 variable "network" {
-  description = "Network to use in the project"
+  description = "Network to use in the project."
   type        = string
 }
 
 variable "node_image" {
-  description = "SQL Server node machine image"
+  description = "SQL Server node machine image."
   type        = string
   default     = "projects/windows-sql-cloud/global/images/family/sql-ent-2019-win-2019"
 }
 
 variable "node_instance_type" {
-  description = "SQL Server database node instance type"
+  description = "SQL Server database node instance type."
   type        = string
   default     = "n2-standard-8"
 }
 
 variable "node_name" {
-  description = "Node base name"
+  description = "Node base name."
   type        = string
   default     = "node"
 }
@@ -129,24 +129,24 @@ variable "project_create" {
 }
 
 variable "project_id" {
-  description = "Google Cloud project ID"
+  description = "Google Cloud project ID."
   type        = string
 }
 
 variable "region" {
-  description = "Region for resources"
+  description = "Region for resources."
   type        = string
   default     = "europe-west4"
 }
 
 variable "shared_vpc_project_id" {
-  description = "Shared VPC project ID for firewall rules"
+  description = "Shared VPC project ID for firewall rules."
   type        = string
   default     = null
 }
 
 variable "sql_admin_password" {
-  description = "Password for the SQL admin user to be created"
+  description = "Password for the SQL admin user to be created."
   type        = string
   validation {
     condition     = length(var.sql_admin_password) > 0
@@ -155,13 +155,13 @@ variable "sql_admin_password" {
 }
 
 variable "sql_client_cidrs" {
-  description = "CIDR ranges that are allowed to connect to SQL Server"
+  description = "CIDR ranges that are allowed to connect to SQL Server."
   type        = list(string)
   default     = ["0.0.0.0/0"]
 }
 
 variable "subnetwork" {
-  description = "Subnetwork to use in the project"
+  description = "Subnetwork to use in the project."
   type        = string
 }
 
@@ -172,19 +172,19 @@ variable "vpc_ip_cidr_range" {
 }
 
 variable "witness_image" {
-  description = "SQL Server witness machine image"
+  description = "SQL Server witness machine image."
   type        = string
   default     = "projects/windows-cloud/global/images/family/windows-2019"
 }
 
 variable "witness_instance_type" {
-  description = "SQL Server witness node instance type"
+  description = "SQL Server witness node instance type."
   type        = string
   default     = "n2-standard-2"
 }
 
 variable "witness_name" {
-  description = "Witness base name"
+  description = "Witness base name."
   type        = string
   default     = "witness"
 }

blueprints/factories/bigquery-factory/README.md

@@ -73,7 +73,7 @@ deletion_protection: bool # not required, defaults to false
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [project_id](variables.tf#L17) | Project ID | <code>string</code> | ✓ |  |
+| [project_id](variables.tf#L17) | Project ID. | <code>string</code> | ✓ |  |
 | [tables_dir](variables.tf#L22) | Relative path for the folder storing table data. | <code>string</code> | ✓ |  |
 | [views_dir](variables.tf#L27) | Relative path for the folder storing view data. | <code>string</code> | ✓ |  |
 

blueprints/factories/bigquery-factory/variables.tf

@@ -15,7 +15,7 @@
  */
 
 variable "project_id" {
-  description = "Project ID"
+  description = "Project ID."
   type        = string
 }
 

blueprints/factories/project-factory/README.md

@@ -238,8 +238,8 @@ vpc:
 | [org_policies](variables.tf#L111) | Org-policy overrides at project level. | <code title="map&#40;object&#40;&#123;&#10;  inherit_from_parent &#61; optional&#40;bool&#41; &#35; for list policies only.&#10;  reset               &#61; optional&#40;bool&#41;&#10;  allow &#61; optional&#40;object&#40;&#123;&#10;    all    &#61; optional&#40;bool&#41;&#10;    values &#61; optional&#40;list&#40;string&#41;&#41;&#10;  &#125;&#41;&#41;&#10;  deny &#61; optional&#40;object&#40;&#123;&#10;    all    &#61; optional&#40;bool&#41;&#10;    values &#61; optional&#40;list&#40;string&#41;&#41;&#10;  &#125;&#41;&#41;&#10;  enforce &#61; optional&#40;bool, true&#41; &#35; for boolean policies only.&#10;  rules &#61; optional&#40;list&#40;object&#40;&#123;&#10;    allow &#61; optional&#40;object&#40;&#123;&#10;      all    &#61; optional&#40;bool&#41;&#10;      values &#61; optional&#40;list&#40;string&#41;&#41;&#10;    &#125;&#41;&#41;&#10;    deny &#61; optional&#40;object&#40;&#123;&#10;      all    &#61; optional&#40;bool&#41;&#10;      values &#61; optional&#40;list&#40;string&#41;&#41;&#10;    &#125;&#41;&#41;&#10;    enforce &#61; optional&#40;bool, true&#41; &#35; for boolean policies only.&#10;    condition &#61; object&#40;&#123;&#10;      description &#61; optional&#40;string&#41;&#10;      expression  &#61; optional&#40;string&#41;&#10;      location    &#61; optional&#40;string&#41;&#10;      title       &#61; optional&#40;string&#41;&#10;    &#125;&#41;&#10;  &#125;&#41;&#41;, &#91;&#93;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [service_accounts](variables.tf#L165) | Service accounts to be created, and roles assigned them on the project. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [service_accounts_additive](variables.tf#L171) | Service accounts to be created, and roles assigned them on the project additively. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
-| [service_accounts_iam](variables.tf#L177) | IAM bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]} | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [service_accounts_iam](variables.tf#L177) | IAM bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
-| [service_accounts_iam_additive](variables.tf#L184) | IAM additive bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]} | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [service_accounts_iam_additive](variables.tf#L184) | IAM additive bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [service_identities_iam](variables.tf#L191) | Custom IAM settings for service identities in service => [role] format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [service_identities_iam_additive](variables.tf#L198) | Custom additive IAM settings for service identities in service => [role] format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [services](variables.tf#L205) | Services to be enabled for the project. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
@@ -249,7 +249,7 @@ vpc:
 
 | name | description | sensitive |
 |---|---|:---:|
-| [project](outputs.tf#L19) | The project resource as return by the `project` module |  |
+| [project](outputs.tf#L19) | The project resource as return by the `project` module. |  |
 | [project_id](outputs.tf#L29) | Project ID. |  |
 
 <!-- END TFDOC -->

blueprints/factories/project-factory/outputs.tf

@@ -17,7 +17,7 @@
 # TODO(): proper outputs
 
 output "project" {
-  description = "The project resource as return by the `project` module"
+  description = "The project resource as return by the `project` module."
   value       = module.project
 
   depends_on = [

blueprints/factories/project-factory/variables.tf

@@ -175,14 +175,14 @@ variable "service_accounts_additive" {
 }
 
 variable "service_accounts_iam" {
-  description = "IAM bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}"
+  description = "IAM bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}."
   type        = map(map(list(string)))
   default     = {}
   nullable    = false
 }
 
 variable "service_accounts_iam_additive" {
-  description = "IAM additive bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}"
+  description = "IAM additive bindings on service account resources. Format is KEY => {ROLE => [MEMBERS]}."
   type        = map(map(list(string)))
   default     = {}
   nullable    = false

blueprints/gke/multi-cluster-mesh-gke-fleet-api/README.md

@@ -69,8 +69,8 @@ Once done testing, you can clean up resources by running `terraform destroy`.
 | [mgmt_project_id](variables.tf#L63) | Management Project ID. | <code>string</code> | ✓ |  |
 | [parent](variables.tf#L94) | Parent. | <code>string</code> | ✓ |  |
 | [clusters_config](variables.tf#L22) | Clusters configuration. | <code title="map&#40;object&#40;&#123;&#10;  subnet_cidr_block   &#61; string&#10;  master_cidr_block   &#61; string&#10;  services_cidr_block &#61; string&#10;  pods_cidr_block     &#61; string&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code title="&#123;&#10;  cluster-a &#61; &#123;&#10;    subnet_cidr_block   &#61; &#34;10.0.1.0&#47;24&#34;&#10;    master_cidr_block   &#61; &#34;10.16.0.0&#47;28&#34;&#10;    services_cidr_block &#61; &#34;192.168.1.0&#47;24&#34;&#10;    pods_cidr_block     &#61; &#34;172.16.0.0&#47;20&#34;&#10;  &#125;&#10;  cluster-b &#61; &#123;&#10;    subnet_cidr_block   &#61; &#34;10.0.2.0&#47;24&#34;&#10;    master_cidr_block   &#61; &#34;10.16.0.16&#47;28&#34;&#10;    services_cidr_block &#61; &#34;192.168.2.0&#47;24&#34;&#10;    pods_cidr_block     &#61; &#34;172.16.16.0&#47;20&#34;&#10;  &#125;&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [istio_version](variables.tf#L57) | ASM version | <code>string</code> |  | <code>&#34;1.14.1-asm.3&#34;</code> |
+| [istio_version](variables.tf#L57) | ASM version. | <code>string</code> |  | <code>&#34;1.14.1-asm.3&#34;</code> |
-| [mgmt_server_config](variables.tf#L68) | Mgmt server configuration | <code title="object&#40;&#123;&#10;  disk_size     &#61; number&#10;  disk_type     &#61; string&#10;  image         &#61; string&#10;  instance_type &#61; string&#10;  region        &#61; string&#10;  zone          &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  disk_size     &#61; 50&#10;  disk_type     &#61; &#34;pd-ssd&#34;&#10;  image         &#61; &#34;projects&#47;ubuntu-os-cloud&#47;global&#47;images&#47;family&#47;ubuntu-2204-lts&#34;&#10;  instance_type &#61; &#34;n1-standard-2&#34;&#10;  region        &#61; &#34;europe-west1&#34;&#10;  zone          &#61; &#34;europe-west1-c&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [mgmt_server_config](variables.tf#L68) | Mgmt server configuration. | <code title="object&#40;&#123;&#10;  disk_size     &#61; number&#10;  disk_type     &#61; string&#10;  image         &#61; string&#10;  instance_type &#61; string&#10;  region        &#61; string&#10;  zone          &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  disk_size     &#61; 50&#10;  disk_type     &#61; &#34;pd-ssd&#34;&#10;  image         &#61; &#34;projects&#47;ubuntu-os-cloud&#47;global&#47;images&#47;family&#47;ubuntu-2204-lts&#34;&#10;  instance_type &#61; &#34;n1-standard-2&#34;&#10;  region        &#61; &#34;europe-west1&#34;&#10;  zone          &#61; &#34;europe-west1-c&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [mgmt_subnet_cidr_block](variables.tf#L88) | Management subnet CIDR block. | <code>string</code> |  | <code>&#34;10.0.0.0&#47;28&#34;</code> |
 | [region](variables.tf#L99) | Region. | <code>string</code> |  | <code>&#34;europe-west1&#34;</code> |
 

blueprints/gke/multi-cluster-mesh-gke-fleet-api/variables.tf

@@ -55,7 +55,7 @@ variable "host_project_id" {
 
 
 variable "istio_version" {
-  description = "ASM version"
+  description = "ASM version."
   type        = string
   default     = "1.14.1-asm.3"
 }
@@ -66,7 +66,7 @@ variable "mgmt_project_id" {
 }
 
 variable "mgmt_server_config" {
-  description = "Mgmt server configuration"
+  description = "Mgmt server configuration."
   type = object({
     disk_size     = number
     disk_type     = string

blueprints/networking/nginx-reverse-proxy-cluster/README.md

@@ -17,20 +17,20 @@ There is a simple [`Dockerfile`](Dockerfile) available for building Ops Agent to
 
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
-| [autoscaling_metric](variables.tf#L31) |  | <code title="object&#40;&#123;&#10;  name                       &#61; string&#10;  single_instance_assignment &#61; number&#10;  target                     &#61; number&#10;  type                       &#61; string &#35; GAUGE, DELTA_PER_SECOND, DELTA_PER_MINUTE&#10;  filter                     &#61; string&#10;&#125;&#41;&#10;&#10;&#10;default &#61; &#123;&#10;  name                       &#61; &#34;workload.googleapis.com&#47;nginx.connections_current&#34;&#10;  single_instance_assignment &#61; null&#10;  target                     &#61; 10 &#35; Target 10 connections per instance, just for demonstration purposes&#10;  type                       &#61; &#34;GAUGE&#34;&#10;  filter                     &#61; null&#10;&#125;">object&#40;&#123;&#8230;&#125;</code> | ✓ |  |
+| [autoscaling_metric](variables.tf#L31) | Definition of metric to use for scaling. | <code title="object&#40;&#123;&#10;  name                       &#61; string&#10;  single_instance_assignment &#61; number&#10;  target                     &#61; number&#10;  type                       &#61; string &#35; GAUGE, DELTA_PER_SECOND, DELTA_PER_MINUTE&#10;  filter                     &#61; string&#10;&#125;&#41;&#10;&#10;&#10;default &#61; &#123;&#10;  name                       &#61; &#34;workload.googleapis.com&#47;nginx.connections_current&#34;&#10;  single_instance_assignment &#61; null&#10;  target                     &#61; 10 &#35; Target 10 connections per instance, just for demonstration purposes&#10;  type                       &#61; &#34;GAUGE&#34;&#10;  filter                     &#61; null&#10;&#125;">object&#40;&#123;&#8230;&#125;</code> | ✓ |  |
-| [prefix](variables.tf#L93) | Prefix used for resource names. | <code>string</code> | ✓ |  |
+| [prefix](variables.tf#L94) | Prefix used for resource names. | <code>string</code> | ✓ |  |
-| [project_name](variables.tf#L111) | Name of an existing project or of the new project | <code>string</code> | ✓ |  |
+| [project_name](variables.tf#L112) | Name of an existing project or of the new project. | <code>string</code> | ✓ |  |
 | [autoscaling](variables.tf#L17) | Autoscaling configuration for the instance group. | <code title="object&#40;&#123;&#10;  min_replicas    &#61; number&#10;  max_replicas    &#61; number&#10;  cooldown_period &#61; number&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  min_replicas    &#61; 1&#10;  max_replicas    &#61; 10&#10;  cooldown_period &#61; 30&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [backends](variables.tf#L49) | Nginx locations configurations to proxy traffic to. | <code>string</code> |  | <code title="&#34;&#60;&#60;-EOT&#10;  location &#47; &#123;&#10;    proxy_pass      http:&#47;&#47;10.0.16.58:80;&#10;    proxy_http_version 1.1;&#10;    proxy_set_header Connection &#34;&#34;;&#10;  &#125;&#10;EOT&#34;">&#34;&#60;&#60;-EOT&#8230;EOT&#34;</code> |
+| [backends](variables.tf#L50) | Nginx locations configurations to proxy traffic to. | <code>string</code> |  | <code title="&#34;&#60;&#60;-EOT&#10;  location &#47; &#123;&#10;    proxy_pass      http:&#47;&#47;10.0.16.58:80;&#10;    proxy_http_version 1.1;&#10;    proxy_set_header Connection &#34;&#34;;&#10;  &#125;&#10;EOT&#34;">&#34;&#60;&#60;-EOT&#8230;EOT&#34;</code> |
-| [cidrs](variables.tf#L61) | Subnet IP CIDR ranges. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  gce &#61; &#34;10.0.16.0&#47;24&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [cidrs](variables.tf#L62) | Subnet IP CIDR ranges. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  gce &#61; &#34;10.0.16.0&#47;24&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
-| [network](variables.tf#L69) | Network name. | <code>string</code> |  | <code>&#34;reverse-proxy-vpc&#34;</code> |
+| [network](variables.tf#L70) | Network name. | <code>string</code> |  | <code>&#34;reverse-proxy-vpc&#34;</code> |
-| [network_create](variables.tf#L75) | Create network or use existing one. | <code>bool</code> |  | <code>true</code> |
+| [network_create](variables.tf#L76) | Create network or use existing one. | <code>bool</code> |  | <code>true</code> |
-| [nginx_image](variables.tf#L81) | Nginx container image to use. | <code>string</code> |  | <code>&#34;gcr.io&#47;cloud-marketplace&#47;google&#47;nginx1:latest&#34;</code> |
+| [nginx_image](variables.tf#L82) | Nginx container image to use. | <code>string</code> |  | <code>&#34;gcr.io&#47;cloud-marketplace&#47;google&#47;nginx1:latest&#34;</code> |
-| [ops_agent_image](variables.tf#L87) | Google Cloud Ops Agent container image to use. | <code>string</code> |  | <code>&#34;gcr.io&#47;sfans-hub-project-d647&#47;ops-agent:latest&#34;</code> |
+| [ops_agent_image](variables.tf#L88) | Google Cloud Ops Agent container image to use. | <code>string</code> |  | <code>&#34;gcr.io&#47;sfans-hub-project-d647&#47;ops-agent:latest&#34;</code> |
-| [project_create](variables.tf#L102) | Parameters for the creation of the new project | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
+| [project_create](variables.tf#L103) | Parameters for the creation of the new project. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [region](variables.tf#L116) | Default region for resources. | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
+| [region](variables.tf#L117) | Default region for resources. | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
-| [subnetwork](variables.tf#L122) | Subnetwork name. | <code>string</code> |  | <code>&#34;gce&#34;</code> |
+| [subnetwork](variables.tf#L123) | Subnetwork name. | <code>string</code> |  | <code>&#34;gce&#34;</code> |
-| [tls](variables.tf#L128) | Also offer reverse proxying with TLS (self-signed certificate). | <code>bool</code> |  | <code>false</code> |
+| [tls](variables.tf#L129) | Also offer reverse proxying with TLS (self-signed certificate). | <code>bool</code> |  | <code>false</code> |
 
 ## Outputs
 

blueprints/networking/nginx-reverse-proxy-cluster/variables.tf

@@ -29,6 +29,7 @@ variable "autoscaling" {
 }
 
 variable "autoscaling_metric" {
+  description = "Definition of metric to use for scaling."
   type = object({
     name                       = string
     single_instance_assignment = number
@@ -100,7 +101,7 @@ variable "prefix" {
 }
 
 variable "project_create" {
-  description = "Parameters for the creation of the new project"
+  description = "Parameters for the creation of the new project."
   type = object({
     billing_account_id = string
     parent             = string
@@ -109,7 +110,7 @@ variable "project_create" {
 }
 
 variable "project_name" {
-  description = "Name of an existing project or of the new project"
+  description = "Name of an existing project or of the new project."
   type        = string
 }
 

blueprints/third-party-solutions/wordpress/cloudrun/README.md

@@ -123,25 +123,25 @@ The above command will delete the associated resources so there will be no billa
 |---|---|:---:|:---:|:---:|
 | [prefix](variables.tf#L57) | Prefix used for resource names. | <code>string</code> | ✓ |  |
 | [project_id](variables.tf#L81) | Project id, references existing project if `project_create` is null. | <code>string</code> | ✓ |  |
-| [wordpress_image](variables.tf#L92) | Image to run with Cloud Run, starts with \"gcr.io\" | <code>string</code> | ✓ |  |
+| [wordpress_image](variables.tf#L92) | Image to run with Cloud Run, starts with \"gcr.io\". | <code>string</code> | ✓ |  |
-| [cloud_run_invoker](variables.tf#L18) | IAM member authorized to access the end-point (for example, 'user:YOUR_IAM_USER' for only you or 'allUsers' for everyone) | <code>string</code> |  | <code>&#34;allUsers&#34;</code> |
+| [cloud_run_invoker](variables.tf#L18) | IAM member authorized to access the end-point (for example, 'user:YOUR_IAM_USER' for only you or 'allUsers' for everyone). | <code>string</code> |  | <code>&#34;allUsers&#34;</code> |
-| [cloudsql_password](variables.tf#L24) | CloudSQL password (will be randomly generated by default) | <code>string</code> |  | <code>null</code> |
+| [cloudsql_password](variables.tf#L24) | CloudSQL password (will be randomly generated by default). | <code>string</code> |  | <code>null</code> |
-| [connector](variables.tf#L30) | Existing VPC serverless connector to use if not creating a new one | <code>string</code> |  | <code>null</code> |
+| [connector](variables.tf#L30) | Existing VPC serverless connector to use if not creating a new one. | <code>string</code> |  | <code>null</code> |
-| [create_connector](variables.tf#L36) | Should a VPC serverless connector be created or not | <code>bool</code> |  | <code>true</code> |
+| [create_connector](variables.tf#L36) | Should a VPC serverless connector be created or not. | <code>bool</code> |  | <code>true</code> |
-| [ip_ranges](variables.tf#L43) | CIDR blocks: VPC serverless connector, Private Service Access(PSA) for CloudSQL, CloudSQL VPC | <code title="object&#40;&#123;&#10;  connector &#61; string&#10;  psa       &#61; string&#10;  sql_vpc   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  connector &#61; &#34;10.8.0.0&#47;28&#34;&#10;  psa       &#61; &#34;10.60.0.0&#47;24&#34;&#10;  sql_vpc   &#61; &#34;10.0.0.0&#47;20&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [ip_ranges](variables.tf#L43) | CIDR blocks: VPC serverless connector, Private Service Access(PSA) for CloudSQL, CloudSQL VPC. | <code title="object&#40;&#123;&#10;  connector &#61; string&#10;  psa       &#61; string&#10;  sql_vpc   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  connector &#61; &#34;10.8.0.0&#47;28&#34;&#10;  psa       &#61; &#34;10.60.0.0&#47;24&#34;&#10;  sql_vpc   &#61; &#34;10.0.0.0&#47;20&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [principals](variables.tf#L66) | List of users to give rights to (CloudSQL admin, client and instanceUser, Logging admin, Service Account User and TokenCreator), eg 'user@domain.com'. | <code>list&#40;string&#41;</code> |  | <code>&#91;&#93;</code> |
 | [project_create](variables.tf#L72) | Provide values if project creation is needed, uses existing project if null. Parent is in 'folders/nnn' or 'organizations/nnn' format. | <code title="object&#40;&#123;&#10;  billing_account_id &#61; string&#10;  parent             &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [region](variables.tf#L86) | Region for the created resources | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
+| [region](variables.tf#L86) | Region for the created resources. | <code>string</code> |  | <code>&#34;europe-west4&#34;</code> |
-| [wordpress_password](variables.tf#L97) | Password for the Wordpress user (will be randomly generated by default) | <code>string</code> |  | <code>null</code> |
+| [wordpress_password](variables.tf#L97) | Password for the Wordpress user (will be randomly generated by default). | <code>string</code> |  | <code>null</code> |
-| [wordpress_port](variables.tf#L103) | Port for the Wordpress image | <code>number</code> |  | <code>8080</code> |
+| [wordpress_port](variables.tf#L103) | Port for the Wordpress image. | <code>number</code> |  | <code>8080</code> |
 
 ## Outputs
 
 | name | description | sensitive |
 |---|---|:---:|
-| [cloud_run_service](outputs.tf#L17) | CloudRun service URL | ✓ |
+| [cloud_run_service](outputs.tf#L17) | CloudRun service URL. | ✓ |
-| [cloudsql_password](outputs.tf#L23) | CloudSQL password | ✓ |
+| [cloudsql_password](outputs.tf#L23) | CloudSQL password. | ✓ |
-| [wp_password](outputs.tf#L29) | Wordpress user password | ✓ |
+| [wp_password](outputs.tf#L29) | Wordpress user password. | ✓ |
-| [wp_user](outputs.tf#L35) | Wordpress username |  |
+| [wp_user](outputs.tf#L35) | Wordpress username. |  |
 
 <!-- END TFDOC -->

blueprints/third-party-solutions/wordpress/cloudrun/outputs.tf

@@ -15,24 +15,24 @@
  */
 
 output "cloud_run_service" {
-  description = "CloudRun service URL"
+  description = "CloudRun service URL."
   value       = module.cloud_run.service.status[0].url
   sensitive   = true
 }
 
 output "cloudsql_password" {
-  description = "CloudSQL password"
+  description = "CloudSQL password."
   value       = var.cloudsql_password == null ? module.cloudsql.user_passwords[local.cloudsql_conf.user] : var.cloudsql_password
   sensitive   = true
 }
 
 output "wp_password" {
-  description = "Wordpress user password"
+  description = "Wordpress user password."
   value       = local.wp_pass
   sensitive   = true
 }
 
 output "wp_user" {
-  description = "Wordpress username"
+  description = "Wordpress username."
   value       = local.wp_user
 }

blueprints/third-party-solutions/wordpress/cloudrun/variables.tf

@@ -17,31 +17,31 @@
 # Documentation: https://cloud.google.com/run/docs/securing/managing-access#making_a_service_public
 variable "cloud_run_invoker" {
   type        = string
-  description = "IAM member authorized to access the end-point (for example, 'user:YOUR_IAM_USER' for only you or 'allUsers' for everyone)"
+  description = "IAM member authorized to access the end-point (for example, 'user:YOUR_IAM_USER' for only you or 'allUsers' for everyone)."
   default     = "allUsers"
 }
 
 variable "cloudsql_password" {
   type        = string
-  description = "CloudSQL password (will be randomly generated by default)"
+  description = "CloudSQL password (will be randomly generated by default)."
   default     = null
 }
 
 variable "connector" {
   type        = string
-  description = "Existing VPC serverless connector to use if not creating a new one"
+  description = "Existing VPC serverless connector to use if not creating a new one."
   default     = null
 }
 
 variable "create_connector" {
   type        = bool
-  description = "Should a VPC serverless connector be created or not"
+  description = "Should a VPC serverless connector be created or not."
   default     = true
 }
 
 # PSA: documentation: https://cloud.google.com/vpc/docs/configure-private-services-access#allocating-range
 variable "ip_ranges" {
-  description = "CIDR blocks: VPC serverless connector, Private Service Access(PSA) for CloudSQL, CloudSQL VPC"
+  description = "CIDR blocks: VPC serverless connector, Private Service Access(PSA) for CloudSQL, CloudSQL VPC."
   type = object({
     connector = string
     psa       = string
@@ -85,23 +85,23 @@ variable "project_id" {
 
 variable "region" {
   type        = string
-  description = "Region for the created resources"
+  description = "Region for the created resources."
   default     = "europe-west4"
 }
 
 variable "wordpress_image" {
   type        = string
-  description = "Image to run with Cloud Run, starts with \"gcr.io\""
+  description = "Image to run with Cloud Run, starts with \"gcr.io\"."
 }
 
 variable "wordpress_password" {
   type        = string
-  description = "Password for the Wordpress user (will be randomly generated by default)"
+  description = "Password for the Wordpress user (will be randomly generated by default)."
   default     = null
 }
 
 variable "wordpress_port" {
   type        = number
-  description = "Port for the Wordpress image"
+  description = "Port for the Wordpress image."
   default     = 8080
 }

fast/stages/00-bootstrap/00-bootstrap-providers.tfx

@@ -0,0 +1 @@
+/Users/jccb/code/cloud-foundation-fabric/fast-configs/jccb/providers/00-bootstrap-providers.tf

fast/stages/00-bootstrap/README.md

@@ -477,7 +477,7 @@ The remaining configuration is manual, as it regards the repositories themselves
 | [iam_additive](variables.tf#L152) | Organization-level custom IAM settings in role => [principal] format for non-authoritative bindings. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |  |
 | [locations](variables.tf#L158) | Optional locations for GCS, BigQuery, and logging buckets created here. | <code title="object&#40;&#123;&#10;  bq      &#61; string&#10;  gcs     &#61; string&#10;  logging &#61; string&#10;  pubsub  &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  bq      &#61; &#34;EU&#34;&#10;  gcs     &#61; &#34;EU&#34;&#10;  logging &#61; &#34;global&#34;&#10;  pubsub  &#61; &#91;&#93;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [log_sinks](variables.tf#L177) | Org-level log sinks, in name => {type, filter} format. | <code title="map&#40;object&#40;&#123;&#10;  filter &#61; string&#10;  type   &#61; string&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code title="&#123;&#10;  audit-logs &#61; &#123;&#10;    filter &#61; &#34;logName:&#92;&#34;&#47;logs&#47;cloudaudit.googleapis.com&#37;2Factivity&#92;&#34; OR logName:&#92;&#34;&#47;logs&#47;cloudaudit.googleapis.com&#37;2Fsystem_event&#92;&#34;&#34;&#10;    type   &#61; &#34;bigquery&#34;&#10;  &#125;&#10;  vpc-sc &#61; &#123;&#10;    filter &#61; &#34;protoPayload.metadata.&#64;type&#61;&#92;&#34;type.googleapis.com&#47;google.cloud.audit.VpcServiceControlAuditMetadata&#92;&#34;&#34;&#10;    type   &#61; &#34;bigquery&#34;&#10;  &#125;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
-| [outputs_location](variables.tf#L211) | Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable | <code>string</code> |  | <code>null</code> |  |
+| [outputs_location](variables.tf#L211) | Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable. | <code>string</code> |  | <code>null</code> |  |
 | [project_parent_ids](variables.tf#L227) | Optional parents for projects created here in folders/nnnnnnn format. Null values will use the organization as parent. | <code title="object&#40;&#123;&#10;  automation &#61; string&#10;  billing    &#61; string&#10;  logging    &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  automation &#61; null&#10;  billing    &#61; null&#10;  logging    &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 
 ## Outputs

fast/stages/00-bootstrap/variables.tf

@@ -209,7 +209,7 @@ variable "organization" {
 }
 
 variable "outputs_location" {
-  description = "Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable"
+  description = "Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable."
   type        = string
   default     = null
 }

fast/stages/01-resman/README.md

@@ -191,7 +191,7 @@ Due to its simplicity, this stage lends itself easily to customizations: adding
 | [groups](variables.tf#L164) | Group names to grant organization-level permissions. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  gcp-billing-admins      &#61; &#34;gcp-billing-admins&#34;,&#10;  gcp-devops              &#61; &#34;gcp-devops&#34;,&#10;  gcp-network-admins      &#61; &#34;gcp-network-admins&#34;&#10;  gcp-organization-admins &#61; &#34;gcp-organization-admins&#34;&#10;  gcp-security-admins     &#61; &#34;gcp-security-admins&#34;&#10;  gcp-support             &#61; &#34;gcp-support&#34;&#10;&#125;">&#123;&#8230;&#125;</code> | <code>00-bootstrap</code> |
 | [locations](variables.tf#L179) | Optional locations for GCS, BigQuery, and logging buckets created here. | <code title="object&#40;&#123;&#10;  bq      &#61; string&#10;  gcs     &#61; string&#10;  logging &#61; string&#10;  pubsub  &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  bq      &#61; &#34;EU&#34;&#10;  gcs     &#61; &#34;EU&#34;&#10;  logging &#61; &#34;global&#34;&#10;  pubsub  &#61; &#91;&#93;&#10;&#125;">&#123;&#8230;&#125;</code> | <code>00-bootstrap</code> |
 | [organization_policy_configs](variables.tf#L207) | Organization policies customization. | <code title="object&#40;&#123;&#10;  allowed_policy_member_domains &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |  |
-| [outputs_location](variables.tf#L215) | Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable | <code>string</code> |  | <code>null</code> |  |
+| [outputs_location](variables.tf#L215) | Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable. | <code>string</code> |  | <code>null</code> |  |
 | [tag_names](variables.tf#L232) | Customized names for resource management tags. | <code title="object&#40;&#123;&#10;  context     &#61; string&#10;  environment &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  context     &#61; &#34;context&#34;&#10;  environment &#61; &#34;environment&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [team_folders](variables.tf#L249) | Team folders to be created. Format is described in a code comment. | <code title="map&#40;object&#40;&#123;&#10;  descriptive_name     &#61; string&#10;  group_iam            &#61; map&#40;list&#40;string&#41;&#41;&#10;  impersonation_groups &#61; list&#40;string&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>null</code> |  |
 

fast/stages/01-resman/variables.tf

@@ -213,7 +213,7 @@ variable "organization_policy_configs" {
 }
 
 variable "outputs_location" {
-  description = "Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable"
+  description = "Enable writing provider, tfvars and CI/CD workflow files to local filesystem. Leave null to disable."
   type        = string
   default     = null
 }

fast/stages/02-networking-nva/README.md

@@ -379,7 +379,7 @@ DNS configurations are centralised in the `dns-*.tf` files. Spokes delegate DNS
 | [custom_adv](variables.tf#L34) | Custom advertisement definitions in name => range format. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  cloud_dns                 &#61; &#34;35.199.192.0&#47;19&#34;&#10;  gcp_all                   &#61; &#34;10.128.0.0&#47;16&#34;&#10;  gcp_dev_ew1               &#61; &#34;10.128.128.0&#47;19&#34;&#10;  gcp_dev_ew4               &#61; &#34;10.128.160.0&#47;19&#34;&#10;  gcp_landing_trusted_ew1   &#61; &#34;10.128.64.0&#47;19&#34;&#10;  gcp_landing_trusted_ew4   &#61; &#34;10.128.96.0&#47;19&#34;&#10;  gcp_landing_untrusted_ew1 &#61; &#34;10.128.0.0&#47;19&#34;&#10;  gcp_landing_untrusted_ew4 &#61; &#34;10.128.32.0&#47;19&#34;&#10;  gcp_prod_ew1              &#61; &#34;10.128.192.0&#47;19&#34;&#10;  gcp_prod_ew4              &#61; &#34;10.128.224.0&#47;19&#34;&#10;  googleapis_private        &#61; &#34;199.36.153.8&#47;30&#34;&#10;  googleapis_restricted     &#61; &#34;199.36.153.4&#47;30&#34;&#10;  rfc_1918_10               &#61; &#34;10.0.0.0&#47;8&#34;&#10;  rfc_1918_172              &#61; &#34;172.16.0.0&#47;12&#34;&#10;  rfc_1918_192              &#61; &#34;192.168.0.0&#47;16&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [custom_roles](variables.tf#L56) | Custom roles defined at the org level, in key => id format. | <code title="object&#40;&#123;&#10;  service_project_network_admin &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> | <code>00-bootstrap</code> |
 | [data_dir](variables.tf#L65) | Relative path for the folder storing configuration data for network resources. | <code>string</code> |  | <code>&#34;data&#34;</code> |  |
-| [dns](variables.tf#L71) | Onprem DNS resolvers | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code title="&#123;&#10;  onprem &#61; &#91;&#34;10.0.200.3&#34;&#93;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
+| [dns](variables.tf#L71) | Onprem DNS resolvers. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code title="&#123;&#10;  onprem &#61; &#91;&#34;10.0.200.3&#34;&#93;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [l7ilb_subnets](variables.tf#L89) | Subnets used for L7 ILBs. | <code title="map&#40;list&#40;object&#40;&#123;&#10;  ip_cidr_range &#61; string&#10;  region        &#61; string&#10;&#125;&#41;&#41;&#41;">map&#40;list&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;&#41;</code> |  | <code title="&#123;&#10;  dev &#61; &#91;&#10;    &#123; ip_cidr_range &#61; &#34;10.128.159.0&#47;24&#34;, region &#61; &#34;europe-west1&#34; &#125;,&#10;    &#123; ip_cidr_range &#61; &#34;10.128.191.0&#47;24&#34;, region &#61; &#34;europe-west4&#34; &#125;&#10;  &#93;&#10;  prod &#61; &#91;&#10;    &#123; ip_cidr_range &#61; &#34;10.128.223.0&#47;24&#34;, region &#61; &#34;europe-west1&#34; &#125;,&#10;    &#123; ip_cidr_range &#61; &#34;10.128.255.0&#47;24&#34;, region &#61; &#34;europe-west4&#34; &#125;&#10;  &#93;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [onprem_cidr](variables.tf#L107) | Onprem addresses in name => range format. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  main &#61; &#34;10.0.0.0&#47;24&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
 | [outputs_location](variables.tf#L125) | Path where providers and tfvars files for the following stages are written. Leave empty to disable. | <code>string</code> |  | <code>null</code> |  |

fast/stages/02-networking-nva/variables.tf

@@ -69,7 +69,7 @@ variable "data_dir" {
 }
 
 variable "dns" {
-  description = "Onprem DNS resolvers"
+  description = "Onprem DNS resolvers."
   type        = map(list(string))
   default = {
     onprem = ["10.0.200.3"]

fast/stages/03-data-platform/dev/README.md

@@ -168,22 +168,22 @@ You can find examples in the `[demo](../../../../blueprints/data-solutions/data-
 |---|---|:---:|:---:|:---:|:---:|
 | [automation](variables.tf#L17) | Automation resources created by the bootstrap stage. | <code title="object&#40;&#123;&#10;  outputs_bucket &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>00-bootstrap</code> |
 | [billing_account](variables.tf#L25) | Billing account id and organization id ('nnnnnnnn' or null). | <code title="object&#40;&#123;&#10;  id              &#61; string&#10;  organization_id &#61; number&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>00-globals</code> |
-| [folder_ids](variables.tf#L64) | Folder to be used for the networking resources in folders/nnnn format. | <code title="object&#40;&#123;&#10;  data-platform-dev &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>01-resman</code> |
+| [folder_ids](variables.tf#L65) | Folder to be used for the networking resources in folders/nnnn format. | <code title="object&#40;&#123;&#10;  data-platform-dev &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>01-resman</code> |
-| [host_project_ids](variables.tf#L82) | Shared VPC project ids. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>02-networking</code> |
+| [host_project_ids](variables.tf#L83) | Shared VPC project ids. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>02-networking</code> |
-| [organization](variables.tf#L114) | Organization details. | <code title="object&#40;&#123;&#10;  domain      &#61; string&#10;  id          &#61; number&#10;  customer_id &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>00-globals</code> |
+| [organization](variables.tf#L115) | Organization details. | <code title="object&#40;&#123;&#10;  domain      &#61; string&#10;  id          &#61; number&#10;  customer_id &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  | <code>00-globals</code> |
-| [prefix](variables.tf#L130) | Unique prefix used for resource names. Not used for projects if 'project_create' is null. | <code>string</code> | ✓ |  | <code>00-globals</code> |
+| [prefix](variables.tf#L131) | Unique prefix used for resource names. Not used for projects if 'project_create' is null. | <code>string</code> | ✓ |  | <code>00-globals</code> |
-| [composer_config](variables.tf#L34) |  | <code title="object&#40;&#123;&#10;  node_count      &#61; number&#10;  airflow_version &#61; string&#10;  env_variables   &#61; map&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  node_count      &#61; 3&#10;  airflow_version &#61; &#34;composer-1.17.5-airflow-2.1.4&#34;&#10;  env_variables   &#61; &#123;&#125;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
+| [composer_config](variables.tf#L34) | Cloud Composer configuration options. | <code title="object&#40;&#123;&#10;  node_count      &#61; number&#10;  airflow_version &#61; string&#10;  env_variables   &#61; map&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  node_count      &#61; 3&#10;  airflow_version &#61; &#34;composer-1.17.5-airflow-2.1.4&#34;&#10;  env_variables   &#61; &#123;&#125;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
-| [data_catalog_tags](variables.tf#L47) | List of Data Catalog Policy tags to be created with optional IAM binging configuration in {tag => {ROLE => [MEMBERS]}} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code title="&#123;&#10;  &#34;3_Confidential&#34; &#61; null&#10;  &#34;2_Private&#34;      &#61; null&#10;  &#34;1_Sensitive&#34;    &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |  |
+| [data_catalog_tags](variables.tf#L48) | List of Data Catalog Policy tags to be created with optional IAM binging configuration in {tag => {ROLE => [MEMBERS]}} format. | <code>map&#40;map&#40;list&#40;string&#41;&#41;&#41;</code> |  | <code title="&#123;&#10;  &#34;3_Confidential&#34; &#61; null&#10;  &#34;2_Private&#34;      &#61; null&#10;  &#34;1_Sensitive&#34;    &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |  |
-| [data_force_destroy](variables.tf#L58) | Flag to set 'force_destroy' on data services like BigQery or Cloud Storage. | <code>bool</code> |  | <code>false</code> |  |
+| [data_force_destroy](variables.tf#L59) | Flag to set 'force_destroy' on data services like BigQery or Cloud Storage. | <code>bool</code> |  | <code>false</code> |  |
-| [groups](variables.tf#L72) | Groups. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  data-analysts  &#61; &#34;gcp-data-analysts&#34;&#10;  data-engineers &#61; &#34;gcp-data-engineers&#34;&#10;  data-security  &#61; &#34;gcp-data-security&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
+| [groups](variables.tf#L73) | Groups. | <code>map&#40;string&#41;</code> |  | <code title="&#123;&#10;  data-analysts  &#61; &#34;gcp-data-analysts&#34;&#10;  data-engineers &#61; &#34;gcp-data-engineers&#34;&#10;  data-security  &#61; &#34;gcp-data-security&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
-| [location](variables.tf#L90) | Location used for multi-regional resources. | <code>string</code> |  | <code>&#34;eu&#34;</code> |  |
+| [location](variables.tf#L91) | Location used for multi-regional resources. | <code>string</code> |  | <code>&#34;eu&#34;</code> |  |
-| [network_config_composer](variables.tf#L96) | Network configurations to use for Composer. | <code title="object&#40;&#123;&#10;  cloudsql_range    &#61; string&#10;  gke_master_range  &#61; string&#10;  gke_pods_name     &#61; string&#10;  gke_services_name &#61; string&#10;  web_server_range  &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  cloudsql_range    &#61; &#34;192.168.254.0&#47;24&#34;&#10;  gke_master_range  &#61; &#34;192.168.255.0&#47;28&#34;&#10;  gke_pods_name     &#61; &#34;pods&#34;&#10;  gke_services_name &#61; &#34;services&#34;&#10;  web_server_range  &#61; &#34;192.168.255.16&#47;28&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
+| [network_config_composer](variables.tf#L97) | Network configurations to use for Composer. | <code title="object&#40;&#123;&#10;  cloudsql_range    &#61; string&#10;  gke_master_range  &#61; string&#10;  gke_pods_name     &#61; string&#10;  gke_services_name &#61; string&#10;  web_server_range  &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  cloudsql_range    &#61; &#34;192.168.254.0&#47;24&#34;&#10;  gke_master_range  &#61; &#34;192.168.255.0&#47;28&#34;&#10;  gke_pods_name     &#61; &#34;pods&#34;&#10;  gke_services_name &#61; &#34;services&#34;&#10;  web_server_range  &#61; &#34;192.168.255.16&#47;28&#34;&#10;&#125;">&#123;&#8230;&#125;</code> |  |
-| [outputs_location](variables.tf#L124) | Path where providers, tfvars files, and lists for the following stages are written. Leave empty to disable. | <code>string</code> |  | <code>null</code> |  |
+| [outputs_location](variables.tf#L125) | Path where providers, tfvars files, and lists for the following stages are written. Leave empty to disable. | <code>string</code> |  | <code>null</code> |  |
-| [project_services](variables.tf#L136) | List of core services enabled on all projects. | <code>list&#40;string&#41;</code> |  | <code title="&#91;&#10;  &#34;cloudresourcemanager.googleapis.com&#34;,&#10;  &#34;iam.googleapis.com&#34;,&#10;  &#34;serviceusage.googleapis.com&#34;,&#10;  &#34;stackdriver.googleapis.com&#34;&#10;&#93;">&#91;&#8230;&#93;</code> |  |
+| [project_services](variables.tf#L137) | List of core services enabled on all projects. | <code>list&#40;string&#41;</code> |  | <code title="&#91;&#10;  &#34;cloudresourcemanager.googleapis.com&#34;,&#10;  &#34;iam.googleapis.com&#34;,&#10;  &#34;serviceusage.googleapis.com&#34;,&#10;  &#34;stackdriver.googleapis.com&#34;&#10;&#93;">&#91;&#8230;&#93;</code> |  |
-| [region](variables.tf#L147) | Region used for regional resources. | <code>string</code> |  | <code>&#34;europe-west1&#34;</code> |  |
+| [region](variables.tf#L148) | Region used for regional resources. | <code>string</code> |  | <code>&#34;europe-west1&#34;</code> |  |
-| [service_encryption_keys](variables.tf#L153) | Cloud KMS to use to encrypt different services. Key location should match service region. | <code title="object&#40;&#123;&#10;  bq       &#61; string&#10;  composer &#61; string&#10;  dataflow &#61; string&#10;  storage  &#61; string&#10;  pubsub   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |  |
+| [service_encryption_keys](variables.tf#L154) | Cloud KMS to use to encrypt different services. Key location should match service region. | <code title="object&#40;&#123;&#10;  bq       &#61; string&#10;  composer &#61; string&#10;  dataflow &#61; string&#10;  storage  &#61; string&#10;  pubsub   &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |  |
-| [subnet_self_links](variables.tf#L165) | Shared VPC subnet self links. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; map&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> | <code>02-networking</code> |
+| [subnet_self_links](variables.tf#L166) | Shared VPC subnet self links. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; map&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> | <code>02-networking</code> |
-| [vpc_self_links](variables.tf#L174) | Shared VPC self links. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> | <code>02-networking</code> |
+| [vpc_self_links](variables.tf#L175) | Shared VPC self links. | <code title="object&#40;&#123;&#10;  dev-spoke-0 &#61; string&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> | <code>02-networking</code> |
 
 ## Outputs
 

fast/stages/03-data-platform/dev/variables.tf

@@ -32,6 +32,7 @@ variable "billing_account" {
 }
 
 variable "composer_config" {
+  description = "Cloud Composer configuration options."
   type = object({
     node_count      = number
     airflow_version = string

modules/api-gateway/README.md

@@ -64,12 +64,12 @@ module "gateway" {
 |---|---|:---:|:---:|:---:|
 | [api_id](variables.tf#L17) | API identifier. | <code>string</code> | ✓ |  |
 | [project_id](variables.tf#L34) | Project identifier. | <code>string</code> | ✓ |  |
-| [region](variables.tf#L39) | Region | <code>string</code> | ✓ |  |
+| [region](variables.tf#L39) | Region. | <code>string</code> | ✓ |  |
 | [spec](variables.tf#L56) | String with the contents of the OpenAPI spec. | <code>string</code> | ✓ |  |
 | [iam](variables.tf#L22) | IAM bindings for the API in {ROLE => [MEMBERS]} format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>null</code> |
 | [labels](variables.tf#L28) | Map of labels. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
-| [service_account_create](variables.tf#L44) | Flag indicating whether a service account needs to be created | <code>bool</code> |  | <code>false</code> |
+| [service_account_create](variables.tf#L44) | Flag indicating whether a service account needs to be created. | <code>bool</code> |  | <code>false</code> |
-| [service_account_email](variables.tf#L50) | Service account for creating API configs | <code>string</code> |  | <code>null</code> |
+| [service_account_email](variables.tf#L50) | Service account for creating API configs. | <code>string</code> |  | <code>null</code> |
 
 ## Outputs
 

modules/api-gateway/variables.tf

@@ -37,18 +37,18 @@ variable "project_id" {
 }
 
 variable "region" {
-  description = "Region"
+  description = "Region."
   type        = string
 }
 
 variable "service_account_create" {
-  description = "Flag indicating whether a service account needs to be created"
+  description = "Flag indicating whether a service account needs to be created."
   type        = bool
   default     = false
 }
 
 variable "service_account_email" {
-  description = "Service account for creating API configs"
+  description = "Service account for creating API configs."
   type        = string
   default     = null
 }

modules/apigee/README.md

@@ -153,7 +153,7 @@ module "apigee" {
 |---|---|:---:|
 | [envgroups](outputs.tf#L17) | Environment groups. |  |
 | [environments](outputs.tf#L22) | Environment. |  |
-| [instances](outputs.tf#L27) | Instances |  |
+| [instances](outputs.tf#L27) | Instances. |  |
 | [org_id](outputs.tf#L32) | Organization ID. |  |
 | [org_name](outputs.tf#L37) | Organization name. |  |
 | [organization](outputs.tf#L42) | Organization. |  |

modules/apigee/outputs.tf

@@ -25,7 +25,7 @@ output "environments" {
 }
 
 output "instances" {
-  description = "Instances"
+  description = "Instances."
   value       = try(google_apigee_instance.instances, null)
 }
 

modules/binauthz/README.md

@@ -62,10 +62,10 @@ module "binauthz" {
 | name | description | type | required | default |
 |---|---|:---:|:---:|:---:|
 | [project_id](variables.tf#L68) | Project ID. | <code>string</code> | ✓ |  |
-| [admission_whitelist_patterns](variables.tf#L17) | An image name pattern to allowlist | <code>list&#40;string&#41;</code> |  | <code>null</code> |
+| [admission_whitelist_patterns](variables.tf#L17) | An image name pattern to allowlist. | <code>list&#40;string&#41;</code> |  | <code>null</code> |
-| [attestors_config](variables.tf#L23) | Attestors configuration | <code title="map&#40;object&#40;&#123;&#10;  note_reference  &#61; string&#10;  iam             &#61; map&#40;list&#40;string&#41;&#41;&#10;  pgp_public_keys &#61; list&#40;string&#41;&#10;  pkix_public_keys &#61; list&#40;object&#40;&#123;&#10;    id                  &#61; string&#10;    public_key_pem      &#61; string&#10;    signature_algorithm &#61; string&#10;  &#125;&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>null</code> |
+| [attestors_config](variables.tf#L23) | Attestors configuration. | <code title="map&#40;object&#40;&#123;&#10;  note_reference  &#61; string&#10;  iam             &#61; map&#40;list&#40;string&#41;&#41;&#10;  pgp_public_keys &#61; list&#40;string&#41;&#10;  pkix_public_keys &#61; list&#40;object&#40;&#123;&#10;    id                  &#61; string&#10;    public_key_pem      &#61; string&#10;    signature_algorithm &#61; string&#10;  &#125;&#41;&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>null</code> |
-| [cluster_admission_rules](variables.tf#L38) | Admission rules | <code title="map&#40;object&#40;&#123;&#10;  evaluation_mode  &#61; string&#10;  enforcement_mode &#61; string&#10;  attestors        &#61; list&#40;string&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>null</code> |
+| [cluster_admission_rules](variables.tf#L38) | Admission rules. | <code title="map&#40;object&#40;&#123;&#10;  evaluation_mode  &#61; string&#10;  enforcement_mode &#61; string&#10;  attestors        &#61; list&#40;string&#41;&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>null</code> |
-| [default_admission_rule](variables.tf#L48) | Default admission rule | <code title="object&#40;&#123;&#10;  evaluation_mode  &#61; string&#10;  enforcement_mode &#61; string&#10;  attestors        &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  evaluation_mode  &#61; &#34;ALWAYS_ALLOW&#34;&#10;  enforcement_mode &#61; &#34;ENFORCED_BLOCK_AND_AUDIT_LOG&#34;&#10;  attestors        &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [default_admission_rule](variables.tf#L48) | Default admission rule. | <code title="object&#40;&#123;&#10;  evaluation_mode  &#61; string&#10;  enforcement_mode &#61; string&#10;  attestors        &#61; list&#40;string&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  evaluation_mode  &#61; &#34;ALWAYS_ALLOW&#34;&#10;  enforcement_mode &#61; &#34;ENFORCED_BLOCK_AND_AUDIT_LOG&#34;&#10;  attestors        &#61; null&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [global_policy_evaluation_mode](variables.tf#L62) | Global policy evaluation mode. | <code>string</code> |  | <code>null</code> |
 
 ## Outputs
@@ -73,7 +73,7 @@ module "binauthz" {
 | name | description | sensitive |
 |---|---|:---:|
 | [attestors](outputs.tf#L17) | Attestors. |  |
-| [id](outputs.tf#L25) | Binary Authorization policy ID |  |
+| [id](outputs.tf#L25) | Binary Authorization policy ID. |  |
 | [notes](outputs.tf#L30) | Notes. |  |
 
 <!-- END TFDOC -->

modules/binauthz/outputs.tf

@@ -23,7 +23,7 @@ output "attestors" {
 }
 
 output "id" {
-  description = "Binary Authorization policy ID"
+  description = "Binary Authorization policy ID."
   value       = google_binary_authorization_policy.policy.id
 }
 

modules/binauthz/variables.tf

@@ -15,13 +15,13 @@
  */
 
 variable "admission_whitelist_patterns" {
-  description = "An image name pattern to allowlist"
+  description = "An image name pattern to allowlist."
   type        = list(string)
   default     = null
 }
 
 variable "attestors_config" {
-  description = "Attestors configuration"
+  description = "Attestors configuration."
   type = map(object({
     note_reference  = string
     iam             = map(list(string))
@@ -36,7 +36,7 @@ variable "attestors_config" {
 }
 
 variable "cluster_admission_rules" {
-  description = "Admission rules"
+  description = "Admission rules."
   type = map(object({
     evaluation_mode  = string
     enforcement_mode = string
@@ -46,7 +46,7 @@ variable "cluster_admission_rules" {
 }
 
 variable "default_admission_rule" {
-  description = "Default admission rule"
+  description = "Default admission rule."
   type = object({
     evaluation_mode  = string
     enforcement_mode = string

modules/cloud-function/README.md

@@ -230,10 +230,10 @@ module "cf-http" {
 | [name](variables.tf#L94) | Name used for cloud function and associated resources. | <code>string</code> | ✓ |  |
 | [project_id](variables.tf#L109) | Project id used for all resources. | <code>string</code> | ✓ |  |
 | [bucket_config](variables.tf#L17) | Enable and configure auto-created bucket. Set fields to null to use defaults. | <code title="object&#40;&#123;&#10;  location                  &#61; optional&#40;string&#41;&#10;  lifecycle_delete_age_days &#61; optional&#40;number&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>null</code> |
-| [build_worker_pool](variables.tf#L31) | Build worker pool, in projects/<PROJECT-ID>/locations/<REGION>/workerPools/<POOL_NAME> format | <code>string</code> |  | <code>null</code> |
+| [build_worker_pool](variables.tf#L31) | Build worker pool, in projects/<PROJECT-ID>/locations/<REGION>/workerPools/<POOL_NAME> format. | <code>string</code> |  | <code>null</code> |
 | [description](variables.tf#L46) | Optional description. | <code>string</code> |  | <code>&#34;Terraform managed.&#34;</code> |
 | [environment_variables](variables.tf#L52) | Cloud function environment variables. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |
-| [function_config](variables.tf#L58) | Cloud function configuration. Defaults to using main as entrypoint, 1 instance with 256MiB of memory, and 180 second timeout | <code title="object&#40;&#123;&#10;  entry_point     &#61; optional&#40;string, &#34;main&#34;&#41;&#10;  instance_count  &#61; optional&#40;number, 1&#41;&#10;  memory_mb       &#61; optional&#40;number, 256&#41; &#35; Memory in MB&#10;  runtime         &#61; optional&#40;string, &#34;python310&#34;&#41;&#10;  timeout_seconds &#61; optional&#40;number, 180&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  entry_point     &#61; &#34;main&#34;&#10;  instance_count  &#61; 1&#10;  memory_mb       &#61; 256&#10;  runtime         &#61; &#34;python310&#34;&#10;  timeout_seconds &#61; 180&#10;&#125;">&#123;&#8230;&#125;</code> |
+| [function_config](variables.tf#L58) | Cloud function configuration. Defaults to using main as entrypoint, 1 instance with 256MiB of memory, and 180 second timeout. | <code title="object&#40;&#123;&#10;  entry_point     &#61; optional&#40;string, &#34;main&#34;&#41;&#10;  instance_count  &#61; optional&#40;number, 1&#41;&#10;  memory_mb       &#61; optional&#40;number, 256&#41; &#35; Memory in MB&#10;  runtime         &#61; optional&#40;string, &#34;python310&#34;&#41;&#10;  timeout_seconds &#61; optional&#40;number, 180&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code title="&#123;&#10;  entry_point     &#61; &#34;main&#34;&#10;  instance_count  &#61; 1&#10;  memory_mb       &#61; 256&#10;  runtime         &#61; &#34;python310&#34;&#10;  timeout_seconds &#61; 180&#10;&#125;">&#123;&#8230;&#125;</code> |
 | [iam](variables.tf#L76) | IAM bindings for topic in {ROLE => [MEMBERS]} format. | <code>map&#40;list&#40;string&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
 | [ingress_settings](variables.tf#L82) | Control traffic that reaches the cloud function. Allowed values are ALLOW_ALL, ALLOW_INTERNAL_AND_GCLB and ALLOW_INTERNAL_ONLY . | <code>string</code> |  | <code>null</code> |
 | [labels](variables.tf#L88) | Resource labels. | <code>map&#40;string&#41;</code> |  | <code>&#123;&#125;</code> |

modules/cloud-function/variables.tf

@@ -29,7 +29,7 @@ variable "bucket_name" {
 }
 
 variable "build_worker_pool" {
-  description = "Build worker pool, in projects/<PROJECT-ID>/locations/<REGION>/workerPools/<POOL_NAME> format"
+  description = "Build worker pool, in projects/<PROJECT-ID>/locations/<REGION>/workerPools/<POOL_NAME> format."
   type        = string
   default     = null
 }
@@ -56,7 +56,7 @@ variable "environment_variables" {
 }
 
 variable "function_config" {
-  description = "Cloud function configuration. Defaults to using main as entrypoint, 1 instance with 256MiB of memory, and 180 second timeout"
+  description = "Cloud function configuration. Defaults to using main as entrypoint, 1 instance with 256MiB of memory, and 180 second timeout."
   type = object({
     entry_point     = optional(string, "main")
     instance_count  = optional(number, 1)

modules/cloudsql-instance/README.md

@@ -165,7 +165,7 @@ module "db" {
 | [labels](variables.tf#L96) | Labels to be attached to all instances. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
 | [prefix](variables.tf#L112) | Optional prefix used to generate instance names. | <code>string</code> |  | <code>null</code> |
 | [replicas](variables.tf#L132) | Map of NAME=> {REGION, KMS_KEY} for additional read replicas. Set to null to disable replica creation. | <code title="map&#40;object&#40;&#123;&#10;  region              &#61; string&#10;  encryption_key_name &#61; string&#10;&#125;&#41;&#41;">map&#40;object&#40;&#123;&#8230;&#125;&#41;&#41;</code> |  | <code>&#123;&#125;</code> |
-| [root_password](variables.tf#L141) | Root password of the Cloud SQL instance. Required for MS SQL Server | <code>string</code> |  | <code>null</code> |
+| [root_password](variables.tf#L141) | Root password of the Cloud SQL instance. Required for MS SQL Server. | <code>string</code> |  | <code>null</code> |
 | [users](variables.tf#L152) | Map of users to create in the primary instance (and replicated to other replicas) in the format USER=>PASSWORD. For MySQL, anything afterr the first `@` (if persent) will be used as the user's host. Set PASSWORD to null if you want to get an autogenerated password. | <code>map&#40;string&#41;</code> |  | <code>null</code> |
 
 ## Outputs

modules/cloudsql-instance/variables.tf

@@ -139,7 +139,7 @@ variable "replicas" {
 }
 
 variable "root_password" {
-  description = "Root password of the Cloud SQL instance. Required for MS SQL Server"
+  description = "Root password of the Cloud SQL instance. Required for MS SQL Server."
   type        = string
   default     = null
 }

modules/gke-hub/README.md

@@ -297,7 +297,6 @@ module "hub" {
 
 # tftest modules=8 resources=28
 ```
-
 <!-- BEGIN TFDOC -->
 
 ## Variables
@@ -315,6 +314,6 @@ module "hub" {
 
 | name | description | sensitive |
 |---|---|:---:|
-| [cluster_ids](outputs.tf#L17) |  |  |
+| [cluster_ids](outputs.tf#L17) | Ids of all the clusters created. |  |
 
 <!-- END TFDOC -->

modules/gke-hub/outputs.tf

@@ -15,6 +15,7 @@
  */
 
 output "cluster_ids" {
+  description = "Ids of all the clusters created."
   value = {
     for k, v in google_gke_hub_membership.default : k => v.id
   }

modules/net-ilb-l7/README.md

@@ -574,11 +574,7 @@ module "ilb-l7" {
 | [backend-service.tf](./backend-service.tf) | Backend service resources. | <code>google_compute_region_backend_service</code> |
 | [health-check.tf](./health-check.tf) | Health check resource. | <code>google_compute_health_check</code> |
 | [main.tf](./main.tf) | Module-level locals and resources. | <code>google_compute_forwarding_rule</code> · <code>google_compute_instance_group</code> · <code>google_compute_network_endpoint</code> · <code>google_compute_network_endpoint_group</code> · <code>google_compute_region_network_endpoint_group</code> · <code>google_compute_region_ssl_certificate</code> · <code>google_compute_region_target_http_proxy</code> · <code>google_compute_region_target_https_proxy</code> |
-| [outputs.tf](./outputs.tf) | Module outputs. | <code>
+| [outputs.tf](./outputs.tf) | Module outputs. |  |
-  value       = google_compute_forwarding_rule.default
-}
-
-output </code> |
 | [urlmap.tf](./urlmap.tf) | URL map resources. | <code>google_compute_region_url_map</code> |
 | [variables-backend-service.tf](./variables-backend-service.tf) | Backend services variables. |  |
 | [variables-health-check.tf](./variables-health-check.tf) | Health check variable. |  |
@@ -615,7 +611,7 @@ output </code> |
 |---|---|:---:|
 | [address](outputs.tf#L17) | Forwarding rule address. |  |
 | [backend_service_ids](outputs.tf#L22) | Backend service resources. |  |
-| [forwarding_rule](outputs.tf#L29) | Forwarding rule resource |  |
+| [forwarding_rule](outputs.tf#L29) | Forwarding rule resource. |  |
 | [group_ids](outputs.tf#L34) | Autogenerated instance group ids. |  |
 | [health_check_ids](outputs.tf#L41) | Autogenerated health check ids. |  |
 | [neg_ids](outputs.tf#L48) | Autogenerated network endpoint group ids. |  |

modules/net-ilb-l7/outputs.tf

@@ -27,7 +27,7 @@ output "backend_service_ids" {
 }
 
 output "forwarding_rule" {
-  description = "Forwarding rule resource"
+  description = "Forwarding rule resource."
   value       = google_compute_forwarding_rule.default
 }
 

modules/organization/README.md

@@ -471,10 +471,10 @@ module "org" {
 | [firewall_policies](outputs.tf#L35) | Map of firewall policy resources created in the organization. |  |
 | [firewall_policy_id](outputs.tf#L40) | Map of firewall policy ids created in the organization. |  |
 | [network_tag_keys](outputs.tf#L45) | Tag key resources. |  |
-| [network_tag_values](outputs.tf#L52) | Tag value resources. |  |
+| [network_tag_values](outputs.tf#L54) | Tag value resources. |  |
-| [organization_id](outputs.tf#L60) | Organization id dependent on module resources. |  |
+| [organization_id](outputs.tf#L65) | Organization id dependent on module resources. |  |
-| [sink_writer_identities](outputs.tf#L77) | Writer identities created for each sink. |  |
+| [sink_writer_identities](outputs.tf#L82) | Writer identities created for each sink. |  |
-| [tag_keys](outputs.tf#L85) | Tag key resources. |  |
+| [tag_keys](outputs.tf#L90) | Tag key resources. |  |
-| [tag_values](outputs.tf#L92) | Tag value resources. |  |
+| [tag_values](outputs.tf#L99) | Tag value resources. |  |
 
 <!-- END TFDOC -->

modules/organization/outputs.tf

@@ -45,7 +45,9 @@ output "firewall_policy_id" {
 output "network_tag_keys" {
   description = "Tag key resources."
   value = {
-    for k, v in google_tags_tag_key.default : k => v if v.purpose != null
+    for k, v in google_tags_tag_key.default : k => v if(
+      v.purpose != null && v.purpose != ""
+    )
   }
 }
 
@@ -53,7 +55,10 @@ output "network_tag_values" {
   description = "Tag value resources."
   value = {
     for k, v in google_tags_tag_value.default
-    : k => v if google_tags_tag_key.default[split("/", k)[0]].purpose != null
+    : k => v if(
+      google_tags_tag_key.default[split("/", k)[0]].purpose != null &&
+      google_tags_tag_key.default[split("/", k)[0]].purpose != ""
+    )
   }
 }
 
@@ -85,7 +90,9 @@ output "sink_writer_identities" {
 output "tag_keys" {
   description = "Tag key resources."
   value = {
-    for k, v in google_tags_tag_key.default : k => v if v.purpose == null
+    for k, v in google_tags_tag_key.default : k => v if(
+      v.purpose == null || v.purpose == ""
+    )
   }
 }
 
@@ -93,6 +100,9 @@ output "tag_values" {
   description = "Tag value resources."
   value = {
     for k, v in google_tags_tag_value.default
-    : k => v if google_tags_tag_key.default[split("/", k)[0]].purpose == null
+    : k => v if(
+      google_tags_tag_key.default[split("/", k)[0]].purpose == null ||
+      google_tags_tag_key.default[split("/", k)[0]].purpose == ""
+    )
   }
 }

tools/check_documentation.py

@@ -37,6 +37,10 @@ class State(enum.IntEnum):
   FAIL_STALE_README = enum.auto()
   FAIL_UNSORTED_VARS = enum.auto()
   FAIL_UNSORTED_OUTPUTS = enum.auto()
+  FAIL_VARIABLE_PERIOD = enum.auto()
+  FAIL_OUTPUT_PERIOD = enum.auto()
+  FAIL_VARIABLE_DESCRIPTION = enum.auto()
+  FAIL_OUTPUT_DESCRIPTION = enum.auto()
 
   @property
   def failed(self):
@@ -48,8 +52,12 @@ class State(enum.IntEnum):
         State.SKIP: '  ',
         State.OK: '✓ ',
         State.FAIL_STALE_README: '✗R',
-        State.FAIL_UNSORTED_VARS: '✗V',
+        State.FAIL_UNSORTED_VARS: 'SV',
-        State.FAIL_UNSORTED_OUTPUTS: '✗O',
+        State.FAIL_UNSORTED_OUTPUTS: 'SO',
+        State.FAIL_VARIABLE_PERIOD: '.V',
+        State.FAIL_OUTPUT_PERIOD: '.O',
+        State.FAIL_VARIABLE_DESCRIPTION: 'DV',
+        State.FAIL_OUTPUT_DESCRIPTION: 'DO',
     }[self.value]
 
 
@@ -71,10 +79,10 @@ def _check_dir(dir_name, exclude_files=None, files=False, show_extra=False):
         new_doc = tfdoc.create_doc(readme_path.parent, files, show_extra,
                                    exclude_files, readme)
         # TODO: support variables in multiple files
-        variables = [
+        newvars = new_doc.variables
-            v.name for v in new_doc.variables if v.file == "variables.tf"
+        newouts = new_doc.outputs
-        ]
+        variables = [v.name for v in newvars if v.file == "variables.tf"]
-        outputs = [o.name for o in new_doc.outputs if o.file == "outputs.tf"]
+        outputs = [o.name for o in newouts if o.file == "outputs.tf"]
       except SystemExit:
         state = state.SKIP
       else:
@@ -87,6 +95,20 @@ def _check_dir(dir_name, exclude_files=None, files=False, show_extra=False):
                                 new_doc.content.split('\n'))
           diff = '\n'.join([header] + list(ndiff))
 
+        elif empty := [v.name for v in newvars if not v.description]:
+          state = state.FAIL_VARIABLE_DESCRIPTION
+          diff = "\n".join([
+              f'----- {mod_name} variables missing description -----',
+              ', '.join(empty),
+          ])
+
+        elif empty := [o.name for o in newouts if not o.description]:
+          state = state.FAIL_VARIABLE_DESCRIPTION
+          diff = "\n".join([
+              f'----- {mod_name} outputs missing description -----',
+              ', '.join(empty),
+          ])
+
         elif variables != sorted(variables):
           state = state.FAIL_UNSORTED_VARS
           diff = "\n".join([
@@ -103,6 +125,20 @@ def _check_dir(dir_name, exclude_files=None, files=False, show_extra=False):
               ', '.join(sorted(outputs)),
           ])
 
+        elif nc := [v.name for v in newvars if not v.description.endswith('.')]:
+          state = state.FAIL_VARIABLE_PERIOD
+          diff = "\n".join([
+              f'----- {mod_name} variables missing colons -----',
+              ', '.join(nc),
+          ])
+
+        elif nc := [o.name for o in newouts if not o.description.endswith('.')]:
+          state = state.FAIL_VARIABLE_PERIOD
+          diff = "\n".join([
+              f'----- {mod_name} outputs missing colons -----',
+              ', '.join(nc),
+          ])
+
     yield mod_name, state, diff
 
 
@@ -128,7 +164,6 @@ def main(dirs, exclude_file=None, files=False, show_diffs=False,
   if errors:
     if show_diffs:
       print('Errored diffs:')
-      print(errors)
       print('\n'.join([e[1] for e in errors]))
     else:
       print('Errored modules:')