This module helps create several folders under the same parent, enforcing consistent permissions, and with a common naming convention.
The resources/services/activations/deletions that this module will create/trigger are:
- Create folders with the provided names
- Assign the defined permissions to the provided list of users or groups.
This module is meant for use with Terraform 0.12. If you haven't upgraded and need a Terraform 0.11.x-compatible version of this module, the last released version intended for Terraform 0.11.x is 0.1.0.
Basic usage of this module is as follows:
module "folders" {
source = "terraform-google-modules/folders/google"
version = "~> 0.1"
parent_id = "65552901371"
parent_type = "folder"
names = [
"dev",
"staging",
"production",
]
set_roles = true
per_folder_admins = [
"group:gcp-developers@domain.com",
"group:gcp-qa@domain.com",
"group:gcp-ops@domain.com",
]
all_folder_admins = [
"group:gcp-security@domain.com",
]
}
Functional examples are included in the examples directory.
| Name | Description | Type | Default | Required |
|---|---|---|---|---|
| all_folder_admins | List of IAM-style members that will get the extended permissions across all the folders. | list | <list> |
no |
| folder_admin_roles | List of roles that will be applied to per folder owners on their respective folder. | list | <list> |
no |
| names | Folder names. | list | <list> |
no |
| parent_id | Id of the resource under which the folder will be placed. | string | n/a | yes |
| parent_type | Type of the parent reosurce, defaults to organization. | string | "organization" |
no |
| per_folder_admins | List of IAM-style members per folder who will get extended permissions. | list | <list> |
no |
| prefix | Optional prefix to enforce uniqueness of folder names. | string | "" |
no |
| set_roles | Set roles to actors passed in role_members variable. | string | "false" |
no |
| Name | Description |
|---|---|
| ids | Map of name => folder resource id. |
| names | Map of name => folder resource name. |
These sections describe requirements for using this module.
The following dependencies must be available:
- Terraform v0.12
- Terraform Provider for GCP plugin v2.0
A service account with the following roles must be used to provision the resources of this module:
- Folder Creator:
roles/resourcemanager.folderCreator
The Project Factory module and the IAM module may be used in combination to provision a service account with the necessary roles applied.
A project with the following APIs enabled must be used to host the resources of this module:
- Cloud Resource Manager API:
cloudresourcemanager.googleapis.com
The Project Factory module can be used to provision a project with the necessary APIs enabled.
Refer to the contribution guidelines for information on contributing to this module.