gsuite

GSuite

Analyzed script: ensure-gsuite.sh

---

Table of Content

• Terraform resources
• Components
• Yaml representation of Components
• Reference

---

Terraform resources

• Provider: Google
  • google_project
  • google_project_service
  • google_service_account
  • google_project_iam_binding
  • google_project_iam_member^G2

Components

• Components for project: k8s-gsuite¹:
  • Project:
    • k8s-gsuite
  • API:
    • admin
    • groupssettings
  • IAM Service Account:
    • gsuite-groups-manager:
      • display_name: Grants access to the googlegroups API in kubernetes.io GSuite
  • IAM Policy Binding:
    • roles/owner:
      • user:wg-k8s-infra-api@kubernetes.io

Yaml representation of Components^G1,^G2

google_project:
  - name: k8s-gsuite
google_project_service:
  - service: admin.googleapis.com
    project: k8s-gsuite
  - service: groupssettings.googleapis.com
    project: k8s-gsuite
google_service_account:
  - account_id: gsuite-groups-manager
    display_name: Grants access to the googlegroups API in kubernetes.io GSuite
    project: k8s-gsuite
google_project_iam_binding:
  - role: roles/owner
    members:
      - user:wg-k8s-infra-api@kubernetes.io
    project: k8s-gsuite

Reference

• ¹ At the end of script for provisioning GSuite resources there is mention about some manual tasks human needs to do to grant GSuite's service account access (it also needs to be acknowdleged by the human who runs the script by pressing enter)