cloudFunction/variables.tf at lab4 · gcp-terraform/cloudFunction · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126

variable "project" {
  default = "second-project-325919"
}
variable "project_id" {
  default = "second-project-325919"
}

variable "notification_config_topic" {
  default = ""
}

variable "environment" {
  description = "Environment, e.g. 'dv', 'pd', 'uat', 'sb', 'tst'"
  type        = string
  default     = "pd"
}

variable "location" {
  description = "GCP region"
  type        = string
  # REALLY SHOULD BE GLOBAL BUT NOT SUPPORTED
  default = "us"
}

variable "purpose" {
  description = "Purpose of the resources, for naming and labeling"
  type        = string
  default     = "cas"
}

variable "folder_id" {
  description = "The folder id in the dexcom.com organization associated with the project"
  type        = string
  default     = "240679432441" # IT-8Q/SharedServices
}

variable "departmentcode" {
  description = "Department code, 5 digits"
  type        = string
  default     = "71030"
}

variable "owner_email" {
  description = "email of owner"
  type        = string
  default     = ""
}

variable "project_services" {
  description = "API services enabled on project."
  type        = list(string)
  default = [
    "cloudkms.googleapis.com",
    "compute.googleapis.com",
    "container.googleapis.com",
    "containerregistry.googleapis.com",
    "dns.googleapis.com",
    "iam.googleapis.com",
    "iamcredentials.googleapis.com",
    "logging.googleapis.com",
    "monitoring.googleapis.com",
    "oslogin.googleapis.com",
    "privateca.googleapis.com",
    "serviceusage.googleapis.com",
    "stackdriver.googleapis.com",
    "storage-api.googleapis.com",
    "cloudfunctions.googleapis.com"
  ]
}

variable "project_role_members" {
  description = "Map of role names to members of that role."
  type        = map(list(string))
  default = {
    "dev"    = ["marlymarlon5@gmail.com"]
    "devops" = ["marlymarlon5@gmail.com"]
    "admin"  = ["marlymarlon5@gmail.com"]
    "secops" = ["marlymarlon5@gmail.com", "marlymarlon5@gmail.com"]
    "viewer" = ["marlymarlon5@gmail.com", "marlymarlon5@gmail.com", "marlymarlon5@gmail.com", "marlymarlon5@gmail.com"]
  }
}

variable "project_role_bindings" {
  description = "Map of roles to role names."
  type        = map(list(string))
  default = {
    "roles/cloudkms.admin"                 = ["admin"]
    "roles/container.admin"                = ["admin", "dev"]
    "roles/container.clusterAdmin"         = ["admin", "dev"]
    "roles/container.developer"            = ["dev"]
    "roles/dns.admin"                      = ["admin"]
    "roles/errorreporting.admin"           = ["admin"]
    "roles/errorreporting.viewer"          = ["viewer"]
    "roles/logging.admin"                  = ["admin"]
    "roles/logging.configWriter"           = ["admin"]
    "roles/logging.viewer"                 = ["admin"]
    "roles/monitoring.admin"               = ["admin"]
    "roles/monitoring.alertPolicyEditor"   = ["admin"]
    "roles/monitoring.viewer"              = ["viewer"]
    "roles/owner"                          = ["admin"]
    "roles/privateca.auditor"              = ["secops"]
    "roles/privateca.certificateRequester" = ["admin", "devops", "dev"]
    "roles/privateca.certificateManager"   = ["admin", "devops"]
    "roles/privateca.caManager"            = ["admin"]
    "roles/privateca.admin"                = ["admin"]
    "roles/logging.privateLogViewer"       = ["secops"]
    "roles/serviceusage.serviceUsageAdmin" = ["admin"]
    "roles/stackdriver.accounts.editor"    = ["admin"]
    "roles/storage.admin"                  = ["admin"]
    "roles/storage.objectAdmin"            = ["admin"]
    "roles/storage.objectViewer"           = ["viewer"]
  }
}

variable "regions" {
  description = "GCP region"
  type        = list(string)
  #default     = ["us-west2","us-west4","europe-west3","europe-west1"]
  default = ["us-west1", "europe-west1"]
}

variable "gke_master_ipv4_cidr_block" {
  type    = string
  default = "172.23.0.0/28"
}