Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- An execution plan has been generated and is shown below.
- Resource actions are indicated with the following symbols:
- + create
- - destroy
- -/+ destroy and then create replacement
- <= read (data resources)
- Terraform will perform the following actions:
- -/+ google_project_iam_member.additive_sa_role (new resource required)
- id: "pf-test-int-full-40d6/roles/editor/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
- etag: "BwV/HIvaWcE=" => <computed>
- member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
- project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
- role: "roles/editor" => "roles/editor"
- -/+ google_project_iam_member.additive_shared_vpc_role (new resource required)
- id: "aaronlane-pf-test/roles/compute.networkUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
- etag: "BwV/HI00VuM=" => <computed>
- member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
- project: "aaronlane-pf-test" => "aaronlane-pf-test"
- role: "roles/compute.networkUser" => "roles/compute.networkUser"
- -/+ google_service_account.extra_service_account (new resource required)
- id: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
- account_id: "extra-service-account" => "extra-service-account"
- email: "extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
- name: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
- project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
- unique_id: "112486245102543995971" => <computed>
- -/+ google_service_account_iam_member.additive_service_account_grant_to_group (new resource required)
- id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
- etag: "BwV/HIuQUtM=" => <computed>
- member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
- role: "roles/iam.serviceAccountUser" => "roles/iam.serviceAccountUser"
- service_account_id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "projects/${module.project-factory.project_id}/serviceAccounts/${module.project-factory.service_account_email}" (forces new resource)
- - module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
- - module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
- - module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
- - module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
- - module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
- - module.project-factory.google_project.project
- - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
- - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
- - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
- - module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
- - module.project-factory.google_project_iam_member.default_service_account_membership
- - module.project-factory.google_project_iam_member.gke_host_agent
- - module.project-factory.google_project_iam_member.gsuite_group_role
- - module.project-factory.google_project_service.project_services[0]
- - module.project-factory.google_project_service.project_services[1]
- - module.project-factory.google_resource_manager_lien.lien
- - module.project-factory.google_service_account.default_service_account
- - module.project-factory.google_service_account_iam_member.service_account_grant_to_group
- - module.project-factory.null_resource.delete_default_compute_service_account
- - module.project-factory.random_id.random_project_id_suffix
- <= module.project-factory.module.project-factory.data.google_compute_default_service_account.default
- id: <computed>
- email: <computed>
- project: "${google_project.project.id}"
- + module.project-factory.module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
- id: <computed>
- host_project: "aaronlane-pf-test"
- service_project: "${local.project_id}"
- + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
- id: <computed>
- etag: <computed>
- member: "${local.api_s_account_fmt}"
- project: "aaronlane-pf-test"
- region: "us-east4"
- role: "roles/compute.networkUser"
- subnetwork: "subnet-01"
- + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
- id: <computed>
- etag: <computed>
- member: "${local.gke_s_account_fmt}"
- project: "aaronlane-pf-test"
- region: "us-east4"
- role: "roles/compute.networkUser"
- subnetwork: "subnet-01"
- + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
- id: <computed>
- etag: <computed>
- member: "group:pf-test-int-full-editors@phoogle.net"
- project: "aaronlane-pf-test"
- region: "us-east4"
- role: "roles/compute.networkUser"
- subnetwork: "subnet-01"
- + module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
- id: <computed>
- etag: <computed>
- member: "${local.s_account_fmt}"
- project: "aaronlane-pf-test"
- region: "us-east4"
- role: "roles/compute.networkUser"
- subnetwork: "subnet-01"
- + module.project-factory.module.project-factory.google_project.project
- id: <computed>
- app_engine.#: "1"
- app_engine.0.auth_domain: "phoogle.net"
- app_engine.0.code_bucket: <computed>
- app_engine.0.default_bucket: <computed>
- app_engine.0.default_hostname: <computed>
- app_engine.0.feature_settings.#: "1"
- app_engine.0.feature_settings.0.split_health_checks: "false"
- app_engine.0.gcr_domain: <computed>
- app_engine.0.location_id: "us-east4"
- app_engine.0.name: <computed>
- app_engine.0.serving_status: <computed>
- app_engine.0.url_dispatch_rule.#: <computed>
- auto_create_network: "false"
- billing_account: "01E8A0-35F760-5CF02A"
- folder_id: <computed>
- name: "pf-test-int-full"
- number: <computed>
- org_id: "826592752744"
- policy_data: <computed>
- policy_etag: <computed>
- project_id: "${local.temp_project_id}"
- skip_delete: <computed>
- + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
- id: <computed>
- etag: <computed>
- member: "${element(local.shared_vpc_users, count.index)}"
- project: "aaronlane-pf-test"
- role: "roles/compute.networkUser"
- + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
- id: <computed>
- etag: <computed>
- member: "${element(local.shared_vpc_users, count.index)}"
- project: "aaronlane-pf-test"
- role: "roles/compute.networkUser"
- + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
- id: <computed>
- etag: <computed>
- member: "${element(local.shared_vpc_users, count.index)}"
- project: "aaronlane-pf-test"
- role: "roles/compute.networkUser"
- + module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
- id: <computed>
- etag: <computed>
- member: "${element(local.shared_vpc_users, count.index)}"
- project: "aaronlane-pf-test"
- role: "roles/compute.networkUser"
- + module.project-factory.module.project-factory.google_project_iam_member.default_service_account_membership
- id: <computed>
- etag: <computed>
- member: "${local.s_account_fmt}"
- project: "${local.project_id}"
- role: "roles/editor"
- + module.project-factory.module.project-factory.google_project_iam_member.gke_host_agent
- id: <computed>
- etag: <computed>
- member: "${local.gke_s_account_fmt}"
- project: "aaronlane-pf-test"
- role: "roles/container.hostServiceAgentUser"
- + module.project-factory.module.project-factory.google_project_iam_member.gsuite_group_role
- id: <computed>
- etag: <computed>
- member: "group:pf-test-int-full-editors@phoogle.net"
- project: "${local.project_id}"
- role: "roles/viewer"
- + module.project-factory.module.project-factory.google_project_service.project_services[0]
- id: <computed>
- disable_on_destroy: "true"
- project: "${local.project_id}"
- service: "compute.googleapis.com"
- + module.project-factory.module.project-factory.google_project_service.project_services[1]
- id: <computed>
- disable_on_destroy: "true"
- project: "${local.project_id}"
- service: "container.googleapis.com"
- + module.project-factory.module.project-factory.google_resource_manager_lien.lien
- id: <computed>
- create_time: <computed>
- name: <computed>
- origin: "project-factory"
- parent: "projects/${google_project.project.number}"
- reason: "Project Factory lien"
- restrictions.#: "1"
- restrictions.0: "resourcemanager.projects.delete"
- + module.project-factory.module.project-factory.google_service_account.default_service_account
- id: <computed>
- account_id: "project-service-account"
- display_name: "pf-test-int-full Project Service Account"
- email: <computed>
- name: <computed>
- project: "${local.project_id}"
- unique_id: <computed>
- + module.project-factory.module.project-factory.google_service_account_iam_member.service_account_grant_to_group
- id: <computed>
- etag: <computed>
- member: "group:pf-test-int-full-editors@phoogle.net"
- role: "roles/iam.serviceAccountUser"
- service_account_id: "projects/${local.project_id}/serviceAccounts/${\n google_service_account.default_service_account.email\n }"
- + module.project-factory.module.project-factory.null_resource.delete_default_compute_service_account
- id: <computed>
- triggers.%: <computed>
- + module.project-factory.module.project-factory.null_resource.preconditions
- id: <computed>
- triggers.%: "5"
- triggers.billing_account: "01E8A0-35F760-5CF02A"
- triggers.credentials_path: "/usr/local/google/home/aaronlane/src/github/terraform-google-modules/terraform-google-project-factory/credentials.json"
- triggers.folder_id: ""
- triggers.org_id: "826592752744"
- triggers.shared_vpc: "aaronlane-pf-test"
- + module.project-factory.module.project-factory.random_id.random_project_id_suffix
- id: <computed>
- b64: <computed>
- b64_std: <computed>
- b64_url: <computed>
- byte_length: "2"
- dec: <computed>
- hex: <computed>
- Plan: 25 to add, 0 to change, 24 to destroy.
Add Comment
Please, Sign In to add comment