cloud-foundation-fabric/fast/stages-multitenant/1-resman-tenant/root_node.tf

42 lines
1.3 KiB
HCL

/**
* Copyright 2023 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
# tfdoc:file:description Tenant root folder configuration.
module "root-folder" {
source = "../../../modules/folder"
id = var.root_node
folder_create = var.test_skip_data_sources
# start test attributes
parent = (
var.test_skip_data_sources ? "organizations/${var.organization.id}" : null
)
name = var.test_skip_data_sources ? "Test" : null
# end test attributes
iam_additive = {
"roles/accesscontextmanager.policyAdmin" = [
local.automation_sas_iam.security
]
"roles/compute.orgFirewallPolicyAdmin" = [
local.automation_sas_iam.networking
]
"roles/compute.xpnAdmin" = [
local.automation_sas_iam.networking
]
}
org_policies_data_path = var.organization_policy_data_path
}