feat: add iam submodule for tag keys and values

examples/bigquery_dataset/README.md

@@ -14,6 +14,8 @@ This example illustrates how to use the `bigquery_datasets_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| bigquery\_dataset\_one | BQ dataset ID |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/bigquery_dataset/main.tf

@@ -47,3 +47,8 @@ resource "google_bigquery_dataset" "bigquery_dataset_one" {
 resource "random_id" "test" {
   byte_length = 4
 }
+
+output "bigquery_dataset_one" {
+  value       = google_bigquery_dataset.bigquery_dataset_one.dataset_id
+  description = "BQ dataset ID"
+}

examples/cloud_run_service/README.md

@@ -17,6 +17,8 @@ This example illustrates how to use the `cloud_run_service_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| cloud\_run\_service\_one | CloudRun Service |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/cloud_run_service/main.tf

@@ -38,3 +38,7 @@ module "cloud_run_service_iam_binding" {
   }
 }
 
+output "cloud_run_service_one" {
+  value       = var.cloud_run_service_one
+  description = "CloudRun Service"
+}

examples/dns_zone/README.md

@@ -14,6 +14,8 @@ This example illustrates how to use the `bigquery_datasets_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| dns\_zone\_one | DNS Zone created |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/dns_zone/main.tf

@@ -48,3 +48,8 @@ resource "google_dns_managed_zone" "dns_zone_one" {
 resource "random_id" "test" {
   byte_length = 4
 }
+
+output "dns_zone_one" {
+  value       = google_dns_managed_zone.dns_zone_one.name
+  description = "DNS Zone created"
+}

examples/dns_zone/variables.tf

@@ -29,9 +29,6 @@ variable "user_email" {
   description = "Email for group to receive roles (Ex. user@example.com)"
 }
 
-/******************************************
-  bigquery_dataset_iam_binding variables
- *****************************************/
 variable "project_id" {
   type        = string
   description = "Project ID to create BigQuery resources in"

examples/folder/README.md

@@ -15,7 +15,9 @@ This example illustrates how to use the `folders_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| folder | folder one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 

examples/folder/main.tf

@@ -34,3 +34,8 @@ module "folder-iam" {
     ]
   }
 }
+
+output "folder" {
+  value       = var.folder_one
+  description = "folder one"
+}

examples/kms_crypto_key/README.md

@@ -14,6 +14,8 @@ This example illustrates how to use the `kms_crypto_keys_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| kms\_crypto\_one | KMS crypto one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/kms_crypto_key/main.tf

@@ -35,3 +35,7 @@ module "kms_crypto_key_iam_binding" {
   }
 }
 
+output "kms_crypto_one" {
+  value       = var.kms_crypto_key_one
+  description = "KMS crypto one"
+}

examples/kms_key_ring/README.md

@@ -14,6 +14,8 @@ This example illustrates how to use the `kms_key_rings_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| kms\_key\_ring | kms key ring one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/kms_key_ring/main.tf

@@ -34,3 +34,7 @@ module "kms_key_ring_iam_binding" {
   }
 }
 
+output "kms_key_ring" {
+  value       = var.kms_key_ring_one
+  description = "kms key ring one"
+}

examples/organization/README.md

@@ -15,6 +15,8 @@ This example illustrates how to use the `organizations_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| organization | organization one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/organization/main.tf

@@ -36,3 +36,7 @@ module "organization_iam_binding" {
   }
 }
 
+output "organization" {
+  value       = var.organization_one
+  description = "organization one"
+}

examples/project/README.md

@@ -15,6 +15,8 @@ This example illustrates how to use the `projects_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| project\_one | project one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/project/main.tf

@@ -36,3 +36,7 @@ module "project_iam_binding" {
   }
 }
 
+output "project_one" {
+  value       = var.project_one
+  description = "project one"
+}

examples/project_conditions/README.md

@@ -15,6 +15,8 @@ This example illustrates how to use the `projects_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| project\_one | project one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/project_conditions/main.tf

@@ -50,3 +50,7 @@ module "project_iam_binding" {
   ]
 }
 
+output "project_one" {
+  value       = var.project_one
+  description = "project one"
+}

examples/pubsub_subscription/README.md

@@ -16,6 +16,8 @@ This example illustrates how to use the `pubsub_subscriptions_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| pubsub\_subscription\_one | subscription one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/pubsub_subscription/main.tf

@@ -37,3 +37,7 @@ module "pubsub_subscription_iam_binding" {
   }
 }
 
+output "pubsub_subscription_one" {
+  value       = var.pubsub_subscription_one
+  description = "subscription one"
+}

examples/pubsub_topic/README.md

@@ -16,6 +16,8 @@ This example illustrates how to use the `pubsub_topics_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| pubsub\_topic\_one | topic one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/pubsub_topic/main.tf

@@ -37,3 +37,7 @@ module "pubsub_topic_iam_binding" {
   }
 }
 
+output "pubsub_topic_one" {
+  value       = var.pubsub_topic_one
+  description = "topic one"
+}

examples/secret_manager/README.md

@@ -16,7 +16,9 @@ This example illustrates how to use the `secret_manager_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| secret\_one | secret oneß |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 

examples/secret_manager/main.tf

@@ -36,3 +36,8 @@ module "folder-iam" {
     ]
   }
 }
+
+output "secret_one" {
+  value       = var.secret_one
+  description = "secret oneß"
+}

examples/service_account/README.md

@@ -16,7 +16,9 @@ This example illustrates how to use the `service_accounts_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| service\_account\_one | service account one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 

examples/service_account/main.tf

@@ -36,3 +36,8 @@ module "service_account_iam_binding" {
     ]
   }
 }
+
+output "service_account_one" {
+  value       = var.service_account_one
+  description = "service account one"
+}

examples/stackdriver_agent_roles/README.md

@@ -19,6 +19,8 @@ Applies the roles necessary to write metrics and logs to Stackdriver to a given
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| project | project |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/stackdriver_agent_roles/main.tf

@@ -26,3 +26,7 @@ resource "google_project_iam_member" "monitoring-metric_writer" {
   project = var.project
 }
 
+output "project" {
+  value       = var.project
+  description = "project"
+}

examples/storage_bucket/README.md

@@ -15,6 +15,8 @@ This example illustrates how to use the `storage_buckets_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| storage\_bucket\_one | bucket one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/storage_bucket/main.tf

@@ -36,3 +36,7 @@ module "storage_buckets_iam_binding" {
   }
 }
 
+output "storage_bucket_one" {
+  value       = var.storage_bucket_one
+  description = "bucket one"
+}

examples/subnet/README.md

@@ -17,7 +17,9 @@ This example illustrates how to use the `subnets_iam` submodule
 
 ## Outputs
 
-No output.
+| Name | Description |
+|------|-------------|
+| subnet\_one | subnet one |
 
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
 

examples/subnet/main.tf

@@ -53,3 +53,7 @@ module "subnet_iam_binding" {
   }
 }
 
+output "subnet_one" {
+  value       = var.subnet_one
+  description = "subnet one"
+}

examples/tag_keys/README.md

@@ -0,0 +1,21 @@
+# DNS ZOne Example
+
+This example illustrates how to use the `bigquery_datasets_iam` submodule
+
+<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+## Inputs
+
+| Name | Description | Type | Default | Required |
+|------|-------------|------|---------|:--------:|
+| group\_email | Email for group to receive roles (ex. group@example.com) | `string` | n/a | yes |
+| project\_id | Project ID to create BigQuery resources in | `string` | n/a | yes |
+| sa\_email | Email for Service Account to receive roles (Ex. default-sa@example-project-id.iam.gserviceaccount.com) | `string` | n/a | yes |
+| user\_email | Email for group to receive roles (Ex. user@example.com) | `string` | n/a | yes |
+
+## Outputs
+
+| Name | Description |
+|------|-------------|
+| tag\_key | n/a |
+
+<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

examples/tag_keys/main.tf

@@ -0,0 +1,48 @@
+/**
+ * Copyright 2021 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*********************************************
+  Module tag_keys_iam_binding calling
+ *********************************************/
+module "tag_keys_iam_binding" {
+  source = "../../modules/tag_keys_iam/"
+  tag_keys = [
+    google_tags_tag_key.tag_key.name,
+  ]
+  mode = "authoritative"
+
+  bindings = {
+    "roles/viewer" = [
+      "serviceAccount:${var.sa_email}",
+      "group:${var.group_email}",
+      "user:${var.user_email}",
+    ]
+  }
+}
+
+data "google_project" "project" {
+  project_id = var.project_id
+}
+
+resource "google_tags_tag_key" "tag_key" {
+  parent      = "projects/${data.google_project.project.number}"
+  short_name  = "foo"
+  description = "test tags"
+}
+
+output "tag_key" {
+  value = google_tags_tag_key.tag_key.short_name
+}