| deployment_template |
Deployment Pattern to use for Cloud resources and CDP |
string |
n/a |
yes |
| env_prefix |
Shorthand name for the environment. Used in resource descriptions |
string |
n/a |
yes |
| backup_storage_bucket |
Optional Backup location for CDP environment. |
string |
null |
no |
| bucket_storage_class |
The GCS storage class to use for the data, log and backup storage |
string |
"NEARLINE" |
no |
| bucket_storage_region |
The location of the Google Cloud Storage buckets for data, backups and logs. By default this follows the gcp_region variable. |
string |
null |
no |
| cdp_subnet_names |
List of subnet names. Required if create_vpc is false. |
list(any) |
null |
no |
| cdp_vpc_name |
VPC Name for CDP environment. Required if create_vpc is false. |
string |
null |
no |
| compute_router_bgp_settings |
BGP settings used for the Google Compute Router resource in private deployments. |
object({
asn = number
advertise_mode = optional(string)
advertised_groups = optional(string)
advertised_ip_ranges = optional(list(object({})))
keepalive_interval = optional(number)
}) |
{
"advertise_mode": "DEFAULT",
"asn": 64514
} |
no |
| compute_router_name |
Name of the Google Compute Router resource created for private deployment. |
string |
null |
no |
| compute_router_nat_ip_allocate_option |
How external IPs should be allocated for Google Compute Router NAT in private deployments. |
string |
"AUTO_ONLY" |
no |
| compute_router_nat_name |
Name of the Google Compute Router NAT created for private deployment. |
string |
null |
no |
| compute_router_nat_source_subnetwork_ip_ranges |
How NAT should be configured per Subnetwork for Google Compute Router NAT in private deployments. |
string |
"ALL_SUBNETWORKS_ALL_IP_RANGES" |
no |
| create_vpc |
Flag to specify if the VPC Network should be created |
bool |
true |
no |
| data_storage_bucket |
Data storage locations for CDP environment |
string |
null |
no |
| datalake_admin_custom_role_name |
Name of Ranger Audit and Datalake Admin Custom Role |
string |
null |
no |
| datalake_admin_role_permissions |
List of Permission Assignments to the Ranger Audit and Datalake Admin Custom Role |
list(string) |
[
"storage.buckets.get",
"storage.objects.create",
"storage.objects.delete",
"storage.objects.get",
"storage.objects.list",
"storage.hmacKeys.create",
"storage.hmacKeys.delete",
"storage.hmacKeys.get",
"storage.hmacKeys.list",
"storage.hmacKeys.update"
] |
no |
| datalake_admin_service_account_name |
Datalake Admin service account name |
string |
null |
no |
| firewall_default_name |
Name of Default Firewall for CDP environment |
string |
null |
no |
| firewall_internal_name |
Name of Firewall for Internal Virtual Network communication |
string |
null |
no |
| firewall_knox_name |
Name of Knox Firewall for CDP environment |
string |
null |
no |
| gcp_region |
Region which Cloud resources will be created |
string |
null |
no |
| idbroker_custom_role_name |
Name of IDBroker Custom Role |
string |
null |
no |
| idbroker_role_permissions |
List of Permission Assignments to the IDBroker Custom Role |
list(string) |
[
"iam.serviceAccounts.getAccessToken",
"iam.serviceAccounts.actAs"
] |
no |
| idbroker_service_account_name |
IDBroker service account name |
string |
null |
no |
| ingress_extra_cidrs_and_ports |
List of extra CIDR blocks and ports to include in Security Group Ingress rules |
object({
cidrs = list(string)
ports = list(number)
}) |
{
"cidrs": [],
"ports": []
} |
no |
| log_data_access_custom_role_name |
Name of Log Data Access Custom Role |
string |
null |
no |
| log_role_permissions |
List of Permission Assignments to the Log Data Access Custom Role |
list(string) |
[
"storage.buckets.get",
"storage.objects.create"
] |
no |
| log_service_account_name |
Log service account name |
string |
null |
no |
| log_storage_bucket |
Optional log locations for CDP environment. |
string |
null |
no |
| managed_services_global_address_cidr |
CIDR Block for Google Managed Service VPC Peering Connection Address |
string |
"10.10.192.0/24" |
no |
| managed_services_global_address_name |
Name of the Managed Service address used for the Peering Connection to CloudSQL |
string |
null |
no |
| random_id_for_bucket |
Create a random suffix for the bucket names |
bool |
true |
no |
| ranger_audit_service_account_name |
Ranger Audit service account name |
string |
null |
no |
| subnet_count |
Number of Subnets Required |
number |
1 |
no |
| vpc_cidr |
VPC CIDR Block |
string |
"10.1.0.0/19" |
no |
| vpc_name |
VPC name |
string |
null |
no |
| xaccount_sa_policies |
List of IAM policies to apply to the Cross Account Service Account |
list(string) |
[
"roles/iam.serviceAccountUser",
"roles/compute.instanceAdmin.v1",
"roles/storage.admin",
"roles/compute.networkViewer",
"roles/compute.loadBalancerAdmin",
"roles/cloudsql.admin",
"roles/compute.networkUser",
"roles/compute.publicIpAdmin",
"roles/cloudkms.admin"
] |
no |
| xaccount_service_account_name |
Cross Account service account name |
string |
null |
no |