|
1 |
| -group_org_admins = "" # DL |
2 |
| -group_billing_admins = "" # DL |
3 |
| -billing_data_users = "" # DL |
4 |
| -monitoring_workspace_users = "" # DL |
5 |
| - |
6 |
| -#deploy groups |
7 |
| -cto_build_group = "" #TODO |
8 |
| -cto_security_build_group = "" #TODO |
9 |
| -cto_elevated_security_build_group = "" #TODO |
10 |
| -cto_core_networking_build_group = "" #TODO |
11 |
| - |
12 |
| -#ops_user_groups |
13 |
| -cto_security_operations_group = "" |
14 |
| -cto_elevated_security_operations_group = "" |
15 |
| -cto_operations_group = "" |
16 |
| -cto_core_networking_operations_group = "" |
17 |
| -cto_user_management_operations_group = "" #TODO |
18 |
| -cto_audit_compliance_operations_group = "" #TODO |
19 |
| - |
20 |
| -#other group |
21 |
| -cfo = "" #has access to billing |
22 |
| - |
23 |
| - |
24 |
| -org_id = "" # 12 digit gcp org id |
25 |
| -billing_account = "" # billing account id in the format XXXXXX-YYYYYY-ZZZZZZ |
26 |
| -default_region = "" # example: asia-southeast1 |
27 |
| -parent_folder = "" # used if LZ to be deployed under a folder |
28 |
| -project_prefix = "" # example: prj |
29 |
| -folder_prefix = "" # example: fldr |
30 |
| -bucket_prefix = "" # example: bkt |
31 |
| -log_sink_prefix = "" # example: sk |
32 |
| -project_name = "" # example: cldcvr |
33 |
| -primary_contact = "" # example: varun_at_cldcvr_com |
34 |
| -secondary_contact = "" # example: sachi_at_cldcvr_com |
35 |
| -vpc_prefix = "vpc" |
36 |
| - |
37 |
| -#bootstrap |
38 |
| -runner_repo_name = "" # example: `gcp-lz` part of https://github.com/cldcvr/gcp-lz repo |
39 |
| -runner_repo_owner = "" # example: `cldcvr` part of https://github.com/cldcvr/gcp-lz repo |
40 |
| -runner_machine_type = "n1-standard-1" # example: f1-micro or e2-medium |
41 |
| -num_instances = 3 # count of runners required to run the workflows |
42 |
| -gar_repo_name = "" # example: gcf-lz-image (Name of the artifactory repo to be created in `cicd` project |
43 |
| - |
44 |
| -domains_to_allow = ["<DOMAIN NAME>"] # example: godmode.in |
45 |
| -default_region2 = "" # 2nd region required for peering; example: us-west1 |
46 |
| -domain = "" # The DNS name of peering managed zone. Must end with a period. For example: cldcvr.com. |
47 |
| -enable_env_log_sink = true # Enable environment level log sink. |
48 |
| -enable_restricted_network = false # Restriceted network, project and service perimeter |
49 |
| -enable_interconnect_projects = true |
50 |
| -d_enable_dedicated_interconnect = false |
51 |
| -restricted_enable_partner_interconnect = false |
52 |
| -shared_enable_partner_interconnect = false |
53 |
| -runner_subnet_ip = "192.168.0.0/24" |
54 |
| -git_pvt_key_scrt_name = "" |
55 |
| -custom_labels = {} |
56 |
| - |
57 |
| - |
| 1 | +group_org_admins = "" # Distribution List (DL) for Google Group of GCP Organization Administrators. |
| 2 | +group_billing_admins = "" # Distribution List (DL) for Google Group of GCP Billing Administrators. |
| 3 | +billing_data_users = "" # Distribution List (DL) for Google Workspace or Cloud Identity group with access to the billing data set. |
| 4 | +monitoring_workspace_users = "" # Distribution List (DL) for Google Workspace or Cloud Identity group with access to Monitoring Workspaces. |
| 5 | + |
| 6 | +# Deploy groups |
| 7 | +cto_build_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group of guild users. |
| 8 | +cto_security_build_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity security build group. |
| 9 | +cto_elevated_security_build_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for elevated security build users. |
| 10 | +cto_core_networking_build_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity networking build group. |
| 11 | + |
| 12 | +# Ops user groups |
| 13 | +cto_security_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for security operations. |
| 14 | +cto_elevated_security_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for elevated security operations. |
| 15 | +cto_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for operations. |
| 16 | +cto_core_networking_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for network operations. |
| 17 | +cto_user_management_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for management operations. |
| 18 | +cto_audit_compliance_operations_group = "" # Distribution List (DL) for Google Workspace or Cloud Identity group responsible for audit and compliance. |
| 19 | + |
| 20 | +# Other group |
| 21 | +cfo = "" # Distribution List (DL) for Google Workspace or Cloud Identity group of billing data users. |
| 22 | + |
| 23 | +org_id = "" # 12-digit GCP organization ID. |
| 24 | +billing_account = "" # Billing account ID in the format XXXXXX-YYYYYY-ZZZZZZ. |
| 25 | +default_region = "" # Example: asia-southeast1. |
| 26 | +parent_folder = "" # Used if LZ is to be deployed under a folder. |
| 27 | +project_prefix = "" # Example: prj. |
| 28 | +folder_prefix = "" # Example: fldr. |
| 29 | +bucket_prefix = "" # Example: bkt. |
| 30 | +log_sink_prefix = "" # Example: sk. |
| 31 | +project_name = "" # Example: cldcvr. |
| 32 | +primary_contact = "" # Example: varun_at_cldcvr_com. |
| 33 | +secondary_contact = "" # Example: sachi_at_cldcvr_com. |
| 34 | +vpc_prefix = "vpc" # VPC prefix used to create the vpc |
| 35 | + |
| 36 | +# Bootstrap |
| 37 | +runner_repo_name = "" # Example: `gcp-lz` part of https://github.com/cldcvr/gcp-lz repo. |
| 38 | +runner_repo_owner = "" # Example: `cldcvr` part of https://github.com/cldcvr/gcp-lz repo. |
| 39 | +runner_machine_type = "n1-standard-1" # Example: f1-micro or e2-medium. |
| 40 | +num_instances = 3 # Count of runners required to run the workflows. |
| 41 | +gar_repo_name = "" # Example: gcf-lz-image (Name of the artifactory repo to be created in `cicd` project). |
| 42 | + |
| 43 | +domains_to_allow = ["<DOMAIN NAME>"] # Example: godmode.in. |
| 44 | +default_region2 = "" # 2nd region required for peering; example: us-west1. |
| 45 | +domain = "" # The DNS name of the peering managed zone. Must end with a period. For example: cldcvr.com. |
| 46 | +enable_env_log_sink = True # Enable environment-level log sink. |
| 47 | +enable_restricted_network = False # Restricted network, project, and service perimeter. |
| 48 | +enable_interconnect_projects = True # Enable to create interconnect projects. |
| 49 | +d_enable_dedicated_interconnect = False # Set to true if you want to create a dedicated interconnect. |
| 50 | +restricted_enable_partner_interconnect = False # Set to true if you want to create a restricted partner interconnect. |
| 51 | +shared_enable_partner_interconnect = False # Set to true if you want to create a shared partner interconnect. |
| 52 | +runner_subnet_ip = "192.168.0.0/24" # The subnet range in which the runner instances will be built. For example, 192.168.168.0/24. |
| 53 | +git_pvt_key_scrt_name = "" # The name/secret ID that holds the private key for the deploy keys added to the GitHub repo. |
| 54 | +custom_labels = {} # Customer-designed labels for the project. |
0 commit comments