SweetOps / terraform-google-project-iam-custom-role

terraform-google-project-iam-custom-role

Terraform module to proviosion IAM custom role.

Usage

module "label" {
  source    = "git::https://github.com/cloudposse/terraform-null-label.git?ref=tags/0.24.1"
  namespace = "sweetops"
  stage     = "production"
  name      = "aweasome"
}

module "your_aweasome_role" {
  source = "git::https://github.com/SweetOps/terraform-google-service-account.git?ref=master"

  permissions = [
    "compute.disks.create",
    "compute.disks.delete",
    "compute.disks.get",
    "compute.disks.list",
    "compute.disks.use",
  ]

  context = module.label.context
}

module "your_aweasome_role_service_account" {
  source = "git::https://github.com/SweetOps/terraform-google-project-iam-custom-role.git?ref=master"

  roles = [module.your_aweasome_role.name, "roles/iam.serviceAccountUser"]

  context = module.label.context
}

Requirements

Name	Version
terraform	>= 0.14
google	>= 3.0

Providers

Name	Version
google	>= 3.0

Inputs

Name	Description	Type	Default	Required
permissions	The list of names of the permissions this role grants when bound in an IAM policy.	list(string)	n/a	yes
additional_tag_map	Additional tags for appending to tags_as_list_of_maps. Not added to tags.	map(string)	{}	no
attributes	Additional attributes (e.g. 1)	list(string)	[]	no
context	Single object for setting entire context at once. See description of individual variables for details. Leave string and numeric variables as null to use default value. Individual variable settings (non-null) override settings in context object, except for attributes, tags, and additional_tag_map, which are merged.	any	{ "additional_tag_map": {}, "attributes": [], "delimiter": null, "enabled": true, "environment": null, "id_length_limit": null, "label_key_case": null, "label_order": [], "label_value_case": null, "name": null, "namespace": null, "regex_replace_chars": null, "stage": null, "tags": {} }	no
delimiter	Delimiter to be used between namespace, environment, stage, name and attributes. Defaults to - (hyphen). Set to "" to use no delimiter at all.	string	"_"	no
description	A human-readable description for the role.	string	"Managed by Terraform"	no
enabled	Set to false to prevent the module from creating any resources	bool	null	no
environment	Environment, e.g. 'uw2', 'us-west-2', OR 'prod', 'staging', 'dev', 'UAT'	string	null	no
id_length_limit	Limit id to this many characters (minimum 6). Set to 0 for unlimited length. Set to null for default, which is 0. Does not affect id_full.	number	null	no
label_key_case	The letter case of label keys (tag names) (i.e. name, namespace, environment, stage, attributes) to use in tags. Possible values: lower, title, upper. Default value: title.	string	"lower"	no
label_order	The naming order of the id output and Name tag. Defaults to ["namespace", "environment", "stage", "name", "attributes"]. You can omit any of the 5 elements, but at least one must be present.	list(string)	null	no
label_value_case	The letter case of output label values (also used in tags and id). Possible values: lower, title, upper and none (no transformation). Default value: lower.	string	null	no
name	Solution name, e.g. 'app' or 'jenkins'	string	null	no
namespace	Namespace, which could be your organization name or abbreviation, e.g. 'eg' or 'cp'	string	null	no
project	The project in which the resource belongs. If it is not provided, the provider project is used.	string	null	no
regex_replace_chars	Regex to replace chars with empty string in namespace, environment, stage and name. If not set, "/[^a-zA-Z0-9-]/" is used to remove all characters other than hyphens, letters and digits.	string	null	no
role_stage	The current launch stage of the role. Possible values: ALPHA, BETA, GA, DEPRECATED, DISABLED, EAP	string	"GA"	no
stage	Stage, e.g. 'prod', 'staging', 'dev', OR 'source', 'build', 'test', 'deploy', 'release'	string	null	no
tags	Additional tags (e.g. map('BusinessUnit','XYZ')	map(string)	{}	no

Outputs

Name	Description
id	The ID of the role
name	The name of the role

License

The Apache-2.0 license