raphaeldegail/workspace-nucleation

This module sets up a new workspace in a Google Cloud Organization.

workspace_nucleation

This script sets up a new workspace in a Google Cloud Organization. To get started, please see the docs folder.

Requirements

Name	Version
terraform	~> 1.7.5
google	~> 5.21.0
random	~> 3.6.0
tfe	~> 0.53.0

Modules

No modules.

Resources

Name	Type
google_billing_budget.workspace_budget	resource
google_billing_project_info.billing_association	resource
google_cloud_identity_group_membership.billing_users_membership	resource
google_dns_managed_zone.workspace_dns_zone	resource
google_dns_managed_zone_iam_policy.dns_policy	resource
google_folder.workspace_folder	resource
google_folder_iam_policy.folder_policy	resource
google_kms_crypto_key.symmetric_key	resource
google_kms_crypto_key_iam_policy.kms_key_policy	resource
google_kms_key_ring.workspace_keyring	resource
google_project.administrator_project	resource
google_project_iam_custom_role.image_manager_role	resource
google_project_iam_policy.project_policy	resource
google_project_service.administrator_api	resource
google_service_account.administrator	resource
google_service_account.policy_administrator	resource
google_service_account_iam_policy.administrator_service_account_policy	resource
google_service_account_iam_policy.policy_administrator_service_account_policy	resource
google_storage_bucket.administrator_bucket	resource
google_storage_bucket_iam_policy.bucket_policy	resource
google_tags_location_tag_binding.bucket_tag_binding	resource
google_tags_tag_binding.workspace_folder_tag_binding	resource
google_tags_tag_binding.workspace_tag_binding	resource
google_tags_tag_value.workspace_tag_value	resource
google_tags_tag_value_iam_binding.tag_user	resource
google_tags_tag_value_iam_binding.tag_viewer	resource
random_string.workspace_uid	resource
tfe_project.working_project	resource
tfe_project_variable_set.auth_binding	resource
tfe_project_variable_set.config_binding	resource
tfe_variable.bucket	resource
tfe_variable.folder	resource
tfe_variable.name	resource
tfe_variable.project	resource
tfe_variable.run_account	resource
tfe_variable_set.auth_varset	resource
tfe_variable_set.config_varset	resource
google_cloud_identity_group_lookup.billing_group	data source
google_dns_keys.workspace_dns_keys	data source
google_iam_policy.administrators_impersonation	data source
google_iam_policy.billing_management	data source
google_iam_policy.dns_management	data source
google_iam_policy.folder_policy	data source
google_iam_policy.kms_key_usage	data source
google_iam_policy.ownership	data source
google_iam_policy.policy_administrators_impersonation	data source
google_iam_policy.storage_management	data source
google_storage_project_service_account.gcs_account	data source

Inputs

Name	Description	Type	Default
admin_group	Email for administrators group.	string	n/a
billing_account	The ID of the billing account used for the workspace.	string	n/a
billing_email	The name of the Google group with billing usage authorization.	string	n/a
budget_allowed	The monthly amount allowed for the workspace. Must be an integer.	number	n/a
customer_directory	The ID of the Google Cloud Identity directory.	string	n/a
finops_group	Email for finops group.	string	n/a
organization	Name, or domain, of the organization hosting the workspace.	string	n/a
organization_id	The ID of the organization hosting the workspace.	string	n/a
organization_identities	The name of the workload identity pool for the oragnization.	string	n/a
policy_group	Email for policy administrators group.	string	n/a
project	The ID of the root project for the organization. Used to create workspaces.	string	n/a
region	Geographical region for Google Cloud Platform.	string	n/a
tfe_organization	Name of the Terraform Cloud organization hosting the workspaces.	string	n/a
workspaces_folder	The ID of the "Workspaces" folder that contains all subsequent workspaces.	string	n/a
workspaces_tag_key	The ID of "workspace" tag key.	string	n/a

Outputs

Name	Description
administrator_project_id	The ID of the administrator project.
dns_registrar_setup	The DNS records to add to the registrar of the domain to setup the DNS subzone, with DNSsec on.
workspace_bucket_name	The name of the administrator bucket.