terraform-example-foundation

terraform-example-foundation copied to clipboard

organization service account missing permissions when describing scc-notify

2

If you follow the README-GitHub.md, under `Deploying step 1-org`, step 10: ```bash gcloud scc notifications describe "scc-notify" --format="value(name)" --organization=${ORGANIZATION_ID} --impersonate-service-account=${ORG_STEP_SA} ``` produces this error: ```bash ERROR: (gcloud.scc.notifications.describe) PERMISSION_DENIED: Caller does...

rdattilo

Google Cloud Foundation Bootstrapping fail due to github secret_key 404 Not Found

3

### TL;DR Cloned the repo from github and used our service account and modified the terraform.tfvars file with our inputs.The setup is failing with below error : Error: GET https://api.github.com/repos/edoc-intg/netwrk-demo/actions/secrets/public-key:...

edoc-intg

GitHub CI fails shared env setup in 3-networks-dual-svpc without SA impersonation

1

### TL;DR The GitHub CI readme, [3-networks-dual-svpc setup, Step 16+](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/0-bootstrap/README-GitHub.md#deploying-step-3-networks-dual-svpc) (deploying the shared net env) expects the user logged in at the command line to be able to impersonate the...

klondikedragon

Update code base to a current Terraform version

4

### TL;DR The documents (README) for this code base indicates that Terraform version 1.3.10 should be used to for execution. Current Terraform is 1.8.4 as of this writing, and 1.3.10...

agold-rh

Recurring permissions issue when deploying the cloud function for SCC notification, resulting in tfstate corruption

3

### TL;DR When deploying 1-org deployment of a cloud function fails: ================= 2024-06-17T16:10:56.4401141Z module.logs_export.module.destination_aggregated_logs[0].google_logging_linked_dataset.linked_dataset[0]: Creation complete after 1m26s [id=projects/prj-c-logging-p2b3/locations/northamerica-northeast1/buckets/AggregatedLogs/links/ds_c_prj_aggregated_logs_analytics] 2024-06-17T16:10:56.6506201Z time_sleep.wait_logs_export: Creating... 2024-06-17T16:11:06.6507192Z time_sleep.wait_logs_export: Still creating... [10s elapsed] 2024-06-17T16:11:16.6511807Z time_sleep.wait_logs_export:...

mromascanu123

Why use personal token vs. GITHUB_TOKEN?

1

### TL;DR Current process will store someone's personal token (`gh_token`) and keep "carrying it"/using it everywhere (including pipeline) ad vitam aeternam. Github Actions provides the (less fine-grained) token GITHUB_TOKEN. Any...

lpezet

### TL;DR Add [variable validation rules](https://developer.hashicorp.com/terraform/language/values/variables#custom-validation-rules) for variables that are sensitive to unusual/non-intuitive requirements for the accepted format of string. For example, `essential_contacts_domains_to_allow` is unusual in that it requires an...

eeaton

fix(deps)!: Update Terraform terraform-google-modules/kms/google to v3

1

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [terraform-google-modules/kms/google](https://registry.terraform.io/modules/terraform-google-modules/kms/google) ([source](https://redirect.github.com/terraform-google-modules/terraform-google-kms)) | module | major | `~> 2.1` -> `~> 3.0` |...

renovate[bot]

feat(deps): Update Terraform Google Provider to v6 (major)

2

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | major | `>= 3.77, < 6`...

renovate[bot]

Hey folks, this PR contains changes to the structure of bucket names, so that when the deployment is made in a region with a long name, such as "northamerica-northeast1", the...

mariammartins