Guest User

Untitled

a guest
Jan 11th, 2019
319
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.40 KB | None | 0 0
  1. An execution plan has been generated and is shown below.
  2. Resource actions are indicated with the following symbols:
  3. + create
  4. - destroy
  5. -/+ destroy and then create replacement
  6. <= read (data resources)
  7.  
  8. Terraform will perform the following actions:
  9.  
  10. -/+ google_project_iam_member.additive_sa_role (new resource required)
  11. id: "pf-test-int-full-40d6/roles/editor/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
  12. etag: "BwV/HIvaWcE=" => <computed>
  13. member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
  14. project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
  15. role: "roles/editor" => "roles/editor"
  16.  
  17. -/+ google_project_iam_member.additive_shared_vpc_role (new resource required)
  18. id: "aaronlane-pf-test/roles/compute.networkUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
  19. etag: "BwV/HI00VuM=" => <computed>
  20. member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
  21. project: "aaronlane-pf-test" => "aaronlane-pf-test"
  22. role: "roles/compute.networkUser" => "roles/compute.networkUser"
  23.  
  24. -/+ google_service_account.extra_service_account (new resource required)
  25. id: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
  26. account_id: "extra-service-account" => "extra-service-account"
  27. email: "extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
  28. name: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
  29. project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
  30. unique_id: "112486245102543995971" => <computed>
  31.  
  32. -/+ google_service_account_iam_member.additive_service_account_grant_to_group (new resource required)
  33. id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
  34. etag: "BwV/HIuQUtM=" => <computed>
  35. member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
  36. role: "roles/iam.serviceAccountUser" => "roles/iam.serviceAccountUser"
  37. service_account_id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "projects/${module.project-factory.project_id}/serviceAccounts/${module.project-factory.service_account_email}" (forces new resource)
  38.  
  39. - module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
  40.  
  41. - module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
  42.  
  43. - module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
  44.  
  45. - module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
  46.  
  47. - module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
  48.  
  49. - module.project-factory.google_project.project
  50.  
  51. - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
  52.  
  53. - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
  54.  
  55. - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
  56.  
  57. - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
  58.  
  59. - module.project-factory.google_project_iam_member.default_service_account_membership
  60.  
  61. - module.project-factory.google_project_iam_member.gke_host_agent
  62.  
  63. - module.project-factory.google_project_iam_member.gsuite_group_role
  64.  
  65. - module.project-factory.google_project_service.project_services[0]
  66.  
  67. - module.project-factory.google_project_service.project_services[1]
  68.  
  69. - module.project-factory.google_resource_manager_lien.lien
  70.  
  71. - module.project-factory.google_service_account.default_service_account
  72.  
  73. - module.project-factory.google_service_account_iam_member.service_account_grant_to_group
  74.  
  75. - module.project-factory.null_resource.delete_default_compute_service_account
  76.  
  77. - module.project-factory.random_id.random_project_id_suffix
  78.  
  79. <= module.project-factory.module.project-factory.data.google_compute_default_service_account.default
  80. id: <computed>
  81. email: <computed>
  82. project: "${google_project.project.id}"
  83.  
  84. + module.project-factory.module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
  85. id: <computed>
  86. host_project: "aaronlane-pf-test"
  87. service_project: "${local.project_id}"
  88.  
  89. + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
  90. id: <computed>
  91. etag: <computed>
  92. member: "${local.api_s_account_fmt}"
  93. project: "aaronlane-pf-test"
  94. region: "us-east4"
  95. role: "roles/compute.networkUser"
  96. subnetwork: "subnet-01"
  97.  
  98. + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
  99. id: <computed>
  100. etag: <computed>
  101. member: "${local.gke_s_account_fmt}"
  102. project: "aaronlane-pf-test"
  103. region: "us-east4"
  104. role: "roles/compute.networkUser"
  105. subnetwork: "subnet-01"
  106.  
  107. + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
  108. id: <computed>
  109. etag: <computed>
  110. member: "group:pf-test-int-full-editors@phoogle.net"
  111. project: "aaronlane-pf-test"
  112. region: "us-east4"
  113. role: "roles/compute.networkUser"
  114. subnetwork: "subnet-01"
  115.  
  116. + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
  117. id: <computed>
  118. etag: <computed>
  119. member: "${local.s_account_fmt}"
  120. project: "aaronlane-pf-test"
  121. region: "us-east4"
  122. role: "roles/compute.networkUser"
  123. subnetwork: "subnet-01"
  124.  
  125. + module.project-factory.module.project-factory.google_project.project
  126. id: <computed>
  127. app_engine.#: "1"
  128. app_engine.0.auth_domain: "phoogle.net"
  129. app_engine.0.code_bucket: <computed>
  130. app_engine.0.default_bucket: <computed>
  131. app_engine.0.default_hostname: <computed>
  132. app_engine.0.feature_settings.#: "1"
  133. app_engine.0.feature_settings.0.split_health_checks: "false"
  134. app_engine.0.gcr_domain: <computed>
  135. app_engine.0.location_id: "us-east4"
  136. app_engine.0.name: <computed>
  137. app_engine.0.serving_status: <computed>
  138. app_engine.0.url_dispatch_rule.#: <computed>
  139. auto_create_network: "false"
  140. billing_account: "01E8A0-35F760-5CF02A"
  141. folder_id: <computed>
  142. name: "pf-test-int-full"
  143. number: <computed>
  144. org_id: "826592752744"
  145. policy_data: <computed>
  146. policy_etag: <computed>
  147. project_id: "${local.temp_project_id}"
  148. skip_delete: <computed>
  149.  
  150. + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
  151. id: <computed>
  152. etag: <computed>
  153. member: "${element(local.shared_vpc_users, count.index)}"
  154. project: "aaronlane-pf-test"
  155. role: "roles/compute.networkUser"
  156.  
  157. + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
  158. id: <computed>
  159. etag: <computed>
  160. member: "${element(local.shared_vpc_users, count.index)}"
  161. project: "aaronlane-pf-test"
  162. role: "roles/compute.networkUser"
  163.  
  164. + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
  165. id: <computed>
  166. etag: <computed>
  167. member: "${element(local.shared_vpc_users, count.index)}"
  168. project: "aaronlane-pf-test"
  169. role: "roles/compute.networkUser"
  170.  
  171. + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
  172. id: <computed>
  173. etag: <computed>
  174. member: "${element(local.shared_vpc_users, count.index)}"
  175. project: "aaronlane-pf-test"
  176. role: "roles/compute.networkUser"
  177.  
  178. + module.project-factory.module.project-factory.google_project_iam_member.default_service_account_membership
  179. id: <computed>
  180. etag: <computed>
  181. member: "${local.s_account_fmt}"
  182. project: "${local.project_id}"
  183. role: "roles/editor"
  184.  
  185. + module.project-factory.module.project-factory.google_project_iam_member.gke_host_agent
  186. id: <computed>
  187. etag: <computed>
  188. member: "${local.gke_s_account_fmt}"
  189. project: "aaronlane-pf-test"
  190. role: "roles/container.hostServiceAgentUser"
  191.  
  192. + module.project-factory.module.project-factory.google_project_iam_member.gsuite_group_role
  193. id: <computed>
  194. etag: <computed>
  195. member: "group:pf-test-int-full-editors@phoogle.net"
  196. project: "${local.project_id}"
  197. role: "roles/viewer"
  198.  
  199. + module.project-factory.module.project-factory.google_project_service.project_services[0]
  200. id: <computed>
  201. disable_on_destroy: "true"
  202. project: "${local.project_id}"
  203. service: "compute.googleapis.com"
  204.  
  205. + module.project-factory.module.project-factory.google_project_service.project_services[1]
  206. id: <computed>
  207. disable_on_destroy: "true"
  208. project: "${local.project_id}"
  209. service: "container.googleapis.com"
  210.  
  211. + module.project-factory.module.project-factory.google_resource_manager_lien.lien
  212. id: <computed>
  213. create_time: <computed>
  214. name: <computed>
  215. origin: "project-factory"
  216. parent: "projects/${google_project.project.number}"
  217. reason: "Project Factory lien"
  218. restrictions.#: "1"
  219. restrictions.0: "resourcemanager.projects.delete"
  220.  
  221. + module.project-factory.module.project-factory.google_service_account.default_service_account
  222. id: <computed>
  223. account_id: "project-service-account"
  224. display_name: "pf-test-int-full Project Service Account"
  225. email: <computed>
  226. name: <computed>
  227. project: "${local.project_id}"
  228. unique_id: <computed>
  229.  
  230. + module.project-factory.module.project-factory.google_service_account_iam_member.service_account_grant_to_group
  231. id: <computed>
  232. etag: <computed>
  233. member: "group:pf-test-int-full-editors@phoogle.net"
  234. role: "roles/iam.serviceAccountUser"
  235. service_account_id: "projects/${local.project_id}/serviceAccounts/${\n google_service_account.default_service_account.email\n }"
  236.  
  237. + module.project-factory.module.project-factory.null_resource.delete_default_compute_service_account
  238. id: <computed>
  239. triggers.%: <computed>
  240.  
  241. + module.project-factory.module.project-factory.null_resource.preconditions
  242. id: <computed>
  243. triggers.%: "5"
  244. triggers.billing_account: "01E8A0-35F760-5CF02A"
  245. triggers.credentials_path: "/usr/local/google/home/aaronlane/src/github/terraform-google-modules/terraform-google-project-factory/credentials.json"
  246. triggers.folder_id: ""
  247. triggers.org_id: "826592752744"
  248. triggers.shared_vpc: "aaronlane-pf-test"
  249.  
  250. + module.project-factory.module.project-factory.random_id.random_project_id_suffix
  251. id: <computed>
  252. b64: <computed>
  253. b64_std: <computed>
  254. b64_url: <computed>
  255. byte_length: "2"
  256. dec: <computed>
  257. hex: <computed>
  258.  
  259.  
  260. Plan: 25 to add, 0 to change, 24 to destroy.
Add Comment
Please, Sign In to add comment