# Google Cloud Data Catalog Tag Template Module
This module allows managing [Data Catalog Tag Templates](https://cloud.google.com/data-catalog/docs/tags-and-tag-templates).
## Examples
### Simple Tag Template
```hcl
module "data-catalog-tag-template" {
source = "./fabric/modules/data-catalog-tag-template"
project_id = "my-project"
tag_templates = {
demo_var = {
region = "europe-west1"
display_name = "Demo Tag Template"
fields = {
source = {
display_name = "Source of data asset"
type = {
primitive_type = "STRING"
}
is_required = true
}
}
}
}
}
# tftest modules=1 resources=1
```
### Tag Template with IAM
```hcl
module "data-catalog-tag-template" {
source = "./fabric/modules/data-catalog-tag-template"
project_id = "my-project"
tag_templates = {
demo_var = {
region = "europe-west1"
display_name = "Demo Tag Template"
fields = {
source = {
display_name = "Source of data asset"
type = {
primitive_type = "STRING"
}
is_required = true
}
}
}
}
iam = {
"roles/datacatalog.tagTemplateOwner" = ["group:data-governance@example.com"]
"roles/datacatalog.tagTemplateUser" = ["group:data-product-eng@example.com"]
}
}
# tftest modules=1 resources=3
```
```hcl
module "data-catalog-tag-template" {
source = "./fabric/modules/data-catalog-tag-template"
project_id = var.project_id
tag_templates = {
demo_var = {
region = "europe-west1"
display_name = "Demo Tag Template"
fields = {
source = {
display_name = "Source of data asset"
type = {
primitive_type = "STRING"
}
is_required = true
}
}
}
}
iam_bindings = {
admin-with-delegated_roles = {
role = "roles/datacatalog.tagTemplateOwner"
members = ["group:data-governance@example.com"]
condition = {
title = "delegated-role-grants"
expression = format(
"api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly([%s])",
join(",", formatlist("'%s'",
[
"roles/datacatalog.tagTemplateOwner"
]
))
)
}
}
}
}
# tftest modules=1 resources=2
```
```hcl
module "data-catalog-tag-template" {
source = "./fabric/modules/data-catalog-tag-template"
project_id = var.project_id
tag_templates = {
demo_var = {
region = "europe-west1"
display_name = "Demo Tag Template"
fields = {
source = {
display_name = "Source of data asset"
type = {
primitive_type = "STRING"
}
is_required = true
}
}
}
}
iam_bindings_additive = {
admin-with-delegated_roles = {
role = "roles/datacatalog.tagTemplateOwner"
member = "group:data-governance@example.com"
condition = {
title = "delegated-role-grants"
expression = format(
"api.getAttribute('iam.googleapis.com/modifiedGrantsByRole', []).hasOnly([%s])",
join(",", formatlist("'%s'",
[
"roles/datacatalog.tagTemplateOwner"
]
))
)
}
}
}
}
# tftest modules=1 resources=2
```
### Factory
Similarly to other modules, a rules factory (see [Resource Factories](../../blueprints/factories/)) is also included here to allow tag template management via descriptive configuration files.
Factory configuration is via one optional attributes in the `factory_config_path` variable specifying the path where tag template files are stored.
Factory tag templates are merged with rules declared in code, with the latter taking precedence where both use the same key.
The name of the file will be used as `tag_template_id` field.
This is an example of a simple factory:
```hcl
module "data-catalog-tag-template" {
source = "./fabric/modules/data-catalog-tag-template"
project_id = "my-project"
tag_templates = {
demo_var = {
region = "europe-west1"
display_name = "Demo Tag Template"
fields = {
source = {
display_name = "Source of data asset"
type = {
primitive_type = "STRING"
}
is_required = true
}
}
}
}
factories_config = {
tag_templates = "data"
}
}
# tftest modules=1 resources=2 files=demo_tag
```
```yaml
# tftest-file id=demo_tag path=data/demo.yaml
region: europe-west2
display_name: Demo Tag Template
fields:
source:
display_name: Source of data asset
type:
primitive_type: STRING
is_required: true
pii_type:
display_name: PII type
type:
enum_type:
- EMAIL
- SOCIAL SECURITY NUMBER
- NONE
```
## Variables
| name | description | type | required | default |
|---|---|:---:|:---:|:---:|
| [project_id](variables.tf#L62) | Id of the project where Tag Templates will be created. | string | ✓ | |
| [factories_config](variables.tf#L17) | Paths to data files and folders that enable factory functionality. | object({…}) | | {} |
| [iam](variables.tf#L26) | IAM bindings in {ROLE => [MEMBERS]} format. | map(list(string)) | | {} |
| [iam_bindings](variables.tf#L32) | Authoritative IAM bindings in {KEY => {role = ROLE, members = [], condition = {}}}. Keys are arbitrary. | map(object({…})) | | {} |
| [iam_bindings_additive](variables.tf#L47) | Individual additive IAM bindings. Keys are arbitrary. | map(object({…})) | | {} |
| [tag_templates](variables.tf#L67) | Tag templates definitions in the form {TAG_TEMPLATE_ID => TEMPLATE_DEFINITION}. | map(object({…})) | | {} |
## Outputs
| name | description | sensitive |
|---|---|:---:|
| [data_catalog_tag_template_ids](outputs.tf#L17) | Data catalog tag template ids. | |
| [data_catalog_tag_templates](outputs.tf#L22) | Data catalog tag templates. | |