Add xpnAdmin to diffent folders

This commit is contained in:
Julio Castillo 2022-02-04 14:58:37 +01:00 committed by Julio Castillo
parent 52a182ddbd
commit f184ced544
2 changed files with 30 additions and 0 deletions

View File

@ -36,6 +36,7 @@ module "branch-network-folder" {
"roles/owner" = [module.branch-network-sa.iam_email] "roles/owner" = [module.branch-network-sa.iam_email]
"roles/resourcemanager.folderAdmin" = [module.branch-network-sa.iam_email] "roles/resourcemanager.folderAdmin" = [module.branch-network-sa.iam_email]
"roles/resourcemanager.projectCreator" = [module.branch-network-sa.iam_email] "roles/resourcemanager.projectCreator" = [module.branch-network-sa.iam_email]
"roles/compute.xpnAdmin" = [module.branch-network-sa.iam_email]
} }
} }
@ -57,3 +58,26 @@ module "branch-network-gcs" {
"roles/storage.objectAdmin" = [module.branch-network-sa.iam_email] "roles/storage.objectAdmin" = [module.branch-network-sa.iam_email]
} }
} }
module "branch-network-prod-folder" {
source = "../../../modules/folder"
parent = "organizations/${var.organization.id}"
name = "prod"
iam = {
"roles/compute.xpnAdmin" = [
module.branch-teams-prod-projectfactory-sa.iam_email
]
}
}
module "branch-network-dev-folder" {
source = "../../../modules/folder"
parent = "organizations/${var.organization.id}"
name = "dev"
iam = {
"roles/compute.xpnAdmin" = [
module.branch-teams-dev-projectfactory-sa.iam_email
]
}
}

View File

@ -94,6 +94,9 @@ module "branch-teams-team-dev-folder" {
"roles/resourcemanager.projectCreator" = [ "roles/resourcemanager.projectCreator" = [
module.branch-teams-dev-projectfactory-sa.iam_email module.branch-teams-dev-projectfactory-sa.iam_email
] ]
"roles/compute.xpnAdmin" = [
module.branch-teams-dev-projectfactory-sa.iam_email
]
} }
} }
@ -141,6 +144,9 @@ module "branch-teams-team-prod-folder" {
"roles/resourcemanager.projectCreator" = [ "roles/resourcemanager.projectCreator" = [
module.branch-teams-prod-projectfactory-sa.iam_email module.branch-teams-prod-projectfactory-sa.iam_email
] ]
"roles/compute.xpnAdmin" = [
module.branch-teams-prod-projectfactory-sa.iam_email
]
} }
} }