cloud.tf 581 B

1234567891011121314151617181920212223
  1. ### IAM
  2. module "iam_cloud" {
  3. source = "../.."
  4. org_id = var.org_id
  5. cloud_id = var.cloud_id
  6. cloud_user_role_mapping = [
  7. {
  8. name = "cloud_admins"
  9. users = var.groups.cloud_admins
  10. roles = ["admin", ]
  11. },
  12. {
  13. name = "cloud_members"
  14. ### Role Cloud.Member is needed for all users for UI enabling
  15. users = concat(var.groups.project_developers, var.groups.project_admins, var.groups.org_admins, var.groups.network_admins, var.groups.sec_ops, var.groups.cloud_admins)
  16. roles = ["resource-manager.clouds.member", ]
  17. },
  18. ]
  19. }