-
Notifications
You must be signed in to change notification settings - Fork 0
/
terraform.example.tfvars
171 lines (152 loc) · 7.11 KB
/
terraform.example.tfvars
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
/**
* Copyright 2023 Google LLC
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
org_id = "REPLACE_ME" # format "000000000000"
billing_account = "REPLACE_ME" # format "000000-000000-000000"
// For enabling the automatic groups creation, uncoment the
// variables and update the values with the group names
groups = {
# create_required_groups = false # Change to true to create the required_groups
# create_optional_groups = false # Change to true to create the optional_groups
# billing_project = "REPLACE_ME" # Fill to create required or optional groups
required_groups = {
group_org_admins = "REPLACE_ME" # example "[email protected]"
group_billing_admins = "REPLACE_ME" # example "[email protected]"
billing_data_users = "REPLACE_ME" # example "[email protected]"
audit_data_users = "REPLACE_ME" # example "[email protected]"
}
# optional_groups = {
# gcp_security_reviewer = "" #"[email protected]"
# gcp_network_viewer = "" #"[email protected]"
# gcp_scc_admin = "" #"[email protected]"
# gcp_global_secrets_admin = "" #"[email protected]"
# gcp_kms_admin = "" #"[email protected]"
# }
}
default_region = "us-central1"
default_region_2 = "us-west1"
default_region_gcs = "US"
default_region_kms = "us"
# Optional - for an organization with existing projects or for development/validation.
# Uncomment this variable to place all the example foundation resources under
# the provided folder instead of the root organization.
# The variable value is the numeric folder ID
# The folder must already exist.
# parent_folder = "01234567890"
/* ----------------------------------------
Specific to github_bootstrap
---------------------------------------- */
# Un-comment github_bootstrap and its outputs if you want to use GitHub Actions instead of Cloud Build
# gh_repos = {
# owner = "YOUR-GITHUB-USER-OR-ORGANIZATION",
# bootstrap = "YOUR-BOOTSTRAP-REPOSITORY",
# organization = "YOUR-ORGANIZATION-REPOSITORY",
# environments = "YOUR-ENVIRONMENTS-REPOSITORY",
# networks = "YOUR-NETWORKS-REPOSITORY",
# projects = "YOUR-PROJECTS-REPOSITORY",
# }
#
# to prevent saving the `gh_token` in plain text in this file,
# export the GitHub fine grained access token in the command line
# as an environment variable before running terraform.
# Run the following commnad in your shell:
# export TF_VAR_gh_token="YOUR-FINE-GRAINED-ACCESS-TOKEN"
/* ----------------------------------------
Specific to jenkins_bootstrap module
---------------------------------------- */
# Un-comment the jenkins_bootstrap module and its outputs if you want to use Jenkins instead of Cloud Build
# jenkins_agent_gce_subnetwork_cidr_range = "172.16.1.0/24"
#
# jenkins_agent_gce_private_ip_address = "172.16.1.6"
#
# jenkins_agent_gce_ssh_pub_key = "ssh-rsa [KEY_VALUE] [USERNAME]"
#
# jenkins_agent_sa_email = "jenkins-agent-gce" # service_account_prefix will be added
#
# jenkins_controller_subnetwork_cidr_range = ["10.1.0.6/32"]
#
# nat_bgp_asn = "64514"
#
# vpn_shared_secret = "shared_secret"
#
# on_prem_vpn_public_ip_address = ""
#
# on_prem_vpn_public_ip_address2 = ""
#
# router_asn = "64515"
#
# bgp_peer_asn = "64513"
#
# tunnel0_bgp_peer_address = "169.254.1.1"
#
# tunnel0_bgp_session_range = "169.254.1.2/30"
#
# tunnel1_bgp_peer_address = "169.254.2.1"
#
# tunnel1_bgp_session_range = "169.254.2.2/30"
/* ----------------------------------------
Specific to gitlab_bootstrap
---------------------------------------- */
# Un-comment gitlab_bootstrap and its outputs if you want to use GitLab CI/CD instead of Cloud Build
# gl_repos = {
# owner = "YOUR-GITLAB-USER-OR-GROUP",
# bootstrap = "YOUR-BOOTSTRAP-REPOSITORY",
# organization = "YOUR-ORGANIZATION-REPOSITORY",
# environments = "YOUR-ENVIRONMENTS-REPOSITORY",
# networks = "YOUR-NETWORKS-REPOSITORY",
# projects = "YOUR-PROJECTS-REPOSITORY",
# cicd_runner = "YOUR-CICD-RUNNER-REPOSITORY",
# }
#
# to prevent saving the `gitlab_token` in plain text in this file,
# export the GitLab access token in the command line
# as an environment variable before running terraform.
# Run the following commnad in your shell:
# export TF_VAR_gitlab_token="YOUR-ACCESS-TOKEN"
/* ----------------------------------------
Specific to tfc_bootstrap
---------------------------------------- */
// Un-comment tfc_bootstrap and its outputs if you want to use Terraform Cloud instead of Cloud Build
// Format expected: REPO-OWNER/REPO-NAME
# vcs_repos = {
# owner = "YOUR-VCS-USER-OR-ORGANIZATION",
# bootstrap = "YOUR-BOOTSTRAP-REPOSITORY",
# organization = "YOUR-ORGANIZATION-REPOSITORY",
# environments = "YOUR-ENVIRONMENTS-REPOSITORY",
# networks = "YOUR-NETWORKS-REPOSITORY",
# projects = "YOUR-PROJECTS-REPOSITORY",
# }
# tfc_org_name = "REPLACE_ME"
// Set this to true if you want to use Terraform Cloud Agents instead of Terraform Cloud remote runner
// If true, a private Autopilot GKE cluster will be created in your GCP account to be used as Terraform Cloud Agents
// More info about Agents on: https://developer.hashicorp.com/terraform/cloud-docs/agents
# enable_tfc_cloud_agents = false
// to prevent saving the `tfc_token` in plain text in this file,
// export the Terraform Cloud token in the command line
// as an environment variable before running terraform.
// Run the following commnad in your shell:
// export TF_VAR_tfc_token="YOUR-TFC-TOKEN"
// For VCS connection based in OAuth: (GitHub OAuth/GitHub Enterprise/Gitlab.com/GitLab Enterprise or Community Edition)
// to prevent saving the `vcs_oauth_token_id` in plain text in this file,
// export the Terraform Cloud VCS Connection OAuth token ID in the command line
// as an environment variable before running terraform.
// Note: you should be able to copy `OAuth Token ID` (vcs_oauth_token_id) in TFC console:
// https://app.terraform.io/app/YOUR-TFC-ORGANIZATION/settings/version-control
// Run the following commnad in your shell:
// export TF_VAR_vcs_oauth_token_id="YOUR-VCS-OAUTH-TOKEN-ID"
// For GitHub OAuth see: https://developer.hashicorp.com/terraform/cloud-docs/vcs/github
// For GitHub Enterprise see: https://developer.hashicorp.com/terraform/cloud-docs/vcs/github-enterprise
// For GitLab.com see: https://developer.hashicorp.com/terraform/cloud-docs/vcs/gitlab-com
// For GitLab EE/CE see: https://developer.hashicorp.com/terraform/cloud-docs/vcs/gitlab-eece