From 655a87e7042edfbd4eead42740c64d229e1eef47 Mon Sep 17 00:00:00 2001 From: bharathkkb Date: Thu, 14 Oct 2021 15:26:23 -0500 Subject: [PATCH] feat!: hardcode create_project_sa to false --- README.md | 1 - main.tf | 2 +- variables.tf | 5 ----- 3 files changed, 1 insertion(+), 7 deletions(-) diff --git a/README.md b/README.md index 5fcc4e09..5f8059df 100644 --- a/README.md +++ b/README.md @@ -48,7 +48,6 @@ For the cloudbuild submodule, see the README [cloudbuild](./modules/cloudbuild). |------|-------------|------|---------|:--------:| | activate\_apis | List of APIs to enable in the seed project. | `list(string)` | 
[
  "serviceusage.googleapis.com",
  "servicenetworking.googleapis.com",
  "compute.googleapis.com",
  "logging.googleapis.com",
  "bigquery.googleapis.com",
  "cloudresourcemanager.googleapis.com",
  "cloudbilling.googleapis.com",
  "iam.googleapis.com",
  "admin.googleapis.com",
  "appengine.googleapis.com",
  "storage-api.googleapis.com",
  "monitoring.googleapis.com"
]
| no | | billing\_account | The ID of the billing account to associate projects with. | `string` | n/a | yes | -| create\_project\_sa | Whether the default service account for the project shall be created | `bool` | `false` | no | | default\_region | Default region to create resources where applicable. | `string` | `"us-central1"` | no | | encrypt\_gcs\_bucket\_tfstate | Encrypt bucket used for storing terraform state files in seed project. | `bool` | `false` | no | | folder\_id | The ID of a folder to host this project | `string` | `""` | no | diff --git a/main.tf b/main.tf index d087cfdc..fdfba2b3 100644 --- a/main.tf +++ b/main.tf @@ -64,7 +64,7 @@ module "seed_project" { org_id = local.seed_org_depends_on billing_account = var.billing_account activate_apis = local.activate_apis - create_project_sa = var.create_project_sa + create_project_sa = false labels = var.project_labels } diff --git a/variables.tf b/variables.tf index ed2eacae..c8424b49 100644 --- a/variables.tf +++ b/variables.tf @@ -198,8 +198,3 @@ variable "kms_prevent_destroy" { description = "Set the prevent_destroy lifecycle attribute on keys." default = true } - -variable "create_project_sa" { - description = "Whether the default service account for the project shall be created" - default = false -}