2.3 KiB
2.3 KiB
Google Cloud Folder Module
This module allows the creation and management of folders together with their individual IAM bindings and organization policies.
Examples
IAM bindings
module "folder" {
source = "./modules/folder"
parent = "organizations/1234567890"
name = "Folder name"
iam = {
"roles/owner" = ["group:users@example.com"]
}
}
Organization policies
module "folder" {
source = "./modules/folder"
parent = "organizations/1234567890"
name = "Folder name"
policy_boolean = {
"constraints/compute.disableGuestAttributesAccess" = true
"constraints/compute.skipDefaultNetworkCreation" = true
}
policy_list = {
"constraints/compute.trustedImageProjects" = {
inherit_from_parent = null
suggested_value = null
status = true
values = ["projects/my-project"]
}
}
}
Variables
name | description | type | required | default |
---|---|---|---|---|
name | Folder name. | string |
✓ | |
parent | Parent in folders/folder_id or organizations/org_id format. | string |
✓ | |
iam | IAM bindings in {ROLE => [MEMBERS]} format. | map(set(string)) |
{} |
|
policy_boolean | Map of boolean org policies and enforcement value, set value to null for policy restore. | map(bool) |
{} |
|
policy_list | Map of list org policies, status is true for allow, false for deny, null for restore. Values can only be used for allow or deny. | map(object({...})) |
{} |
Outputs
name | description | sensitive |
---|---|---|
folder | Folder resource. | |
id | Folder id. | |
name | Folder name. |