mirror of
https://github.com/outbackdingo/firezone.git
synced 2026-04-08 03:07:56 +00:00
aaea3bf537
This is causing issues applying because our CI terraform IAM user doesn't have the `Billing Account Administrator` role. Rather than granting such a sensitive role to our CI pipeline, I'm suggesting we create the billing budget outside the scope of the terraform config tracked in this repo. If we want it to be tracked as code, I would propose maybe we have a separate (private) repository with a separate token / IAM permissions that we can monitor separately. For the time being, I'll plan to manually create this budget in the UI. Reverts: #7836
39 lines
935 B
HCL
39 lines
935 B
HCL
|
|
resource "google_project" "project" {
|
|
name = var.name
|
|
|
|
org_id = var.organization_id
|
|
billing_account = var.billing_account_id
|
|
project_id = var.id != "" ? var.id : replace(lower(var.name), " ", "-")
|
|
|
|
auto_create_network = var.auto_create_network
|
|
}
|
|
|
|
resource "google_project_service" "oslogin" {
|
|
project = google_project.project.project_id
|
|
service = "oslogin.googleapis.com"
|
|
|
|
disable_on_destroy = false
|
|
}
|
|
|
|
resource "google_project_service" "iam" {
|
|
project = google_project.project.project_id
|
|
service = "iam.googleapis.com"
|
|
|
|
disable_on_destroy = false
|
|
}
|
|
|
|
resource "google_project_service" "iamcredentials" {
|
|
project = google_project.project.project_id
|
|
service = "iamcredentials.googleapis.com"
|
|
|
|
disable_on_destroy = false
|
|
}
|
|
|
|
resource "google_project_service" "serviceusage" {
|
|
project = google_project.project.project_id
|
|
service = "serviceusage.googleapis.com"
|
|
|
|
disable_on_destroy = false
|
|
}
|