Skip to content

Instantly share code, notes, and snippets.

@aaron-lane
Created January 10, 2019 16:29
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save aaron-lane/d2b6a039bc3f3542bb3f13bda5583b23 to your computer and use it in GitHub Desktop.
Save aaron-lane/d2b6a039bc3f3542bb3f13bda5583b23 to your computer and use it in GitHub Desktop.
State migration plan
An execution plan has been generated and is shown below.
Resource actions are indicated with the following symbols:
+ create
- destroy
-/+ destroy and then create replacement
<= read (data resources)
Terraform will perform the following actions:
-/+ google_project_iam_member.additive_sa_role (new resource required)
id: "pf-test-int-full-40d6/roles/editor/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
etag: "BwV/HIvaWcE=" => <computed>
member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
role: "roles/editor" => "roles/editor"
-/+ google_project_iam_member.additive_shared_vpc_role (new resource required)
id: "aaronlane-pf-test/roles/compute.networkUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
etag: "BwV/HI00VuM=" => <computed>
member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
project: "aaronlane-pf-test" => "aaronlane-pf-test"
role: "roles/compute.networkUser" => "roles/compute.networkUser"
-/+ google_service_account.extra_service_account (new resource required)
id: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
account_id: "extra-service-account" => "extra-service-account"
email: "extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
name: "projects/pf-test-int-full-40d6/serviceAccounts/extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed>
project: "pf-test-int-full-40d6" => "${module.project-factory.project_id}" (forces new resource)
unique_id: "112486245102543995971" => <computed>
-/+ google_service_account_iam_member.additive_service_account_grant_to_group (new resource required)
id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => <computed> (forces new resource)
etag: "BwV/HIuQUtM=" => <computed>
member: "serviceAccount:extra-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "serviceAccount:${google_service_account.extra_service_account.email}" (forces new resource)
role: "roles/iam.serviceAccountUser" => "roles/iam.serviceAccountUser"
service_account_id: "projects/pf-test-int-full-40d6/serviceAccounts/project-service-account@pf-test-int-full-40d6.iam.gserviceaccount.com" => "projects/${module.project-factory.project_id}/serviceAccounts/${module.project-factory.service_account_email}" (forces new resource)
- module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
- module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
- module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
- module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
- module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
- module.project-factory.google_project.project
- module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
- module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
- module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
- module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
- module.project-factory.google_project_iam_member.default_service_account_membership
- module.project-factory.google_project_iam_member.gke_host_agent
- module.project-factory.google_project_iam_member.gsuite_group_role
- module.project-factory.google_project_service.project_services[0]
- module.project-factory.google_project_service.project_services[1]
- module.project-factory.google_resource_manager_lien.lien
- module.project-factory.google_service_account.default_service_account
- module.project-factory.google_service_account_iam_member.service_account_grant_to_group
- module.project-factory.null_resource.delete_default_compute_service_account
- module.project-factory.random_id.random_project_id_suffix
<= module.project-factory.module.project-factory.data.google_compute_default_service_account.default
id: <computed>
email: <computed>
project: "${google_project.project.id}"
+ module.project-factory.module.project-factory.google_compute_shared_vpc_service_project.shared_vpc_attachment
id: <computed>
host_project: "aaronlane-pf-test"
service_project: "${local.project_id}"
+ module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.apis_service_account_role_to_vpc_subnets
id: <computed>
etag: <computed>
member: "${local.api_s_account_fmt}"
project: "aaronlane-pf-test"
region: "us-east4"
role: "roles/compute.networkUser"
subnetwork: "subnet-01"
+ module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.gke_shared_vpc_subnets
id: <computed>
etag: <computed>
member: "${local.gke_s_account_fmt}"
project: "aaronlane-pf-test"
region: "us-east4"
role: "roles/compute.networkUser"
subnetwork: "subnet-01"
+ module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.group_role_to_vpc_subnets
id: <computed>
etag: <computed>
member: "group:pf-test-int-full-editors@phoogle.net"
project: "aaronlane-pf-test"
region: "us-east4"
role: "roles/compute.networkUser"
subnetwork: "subnet-01"
+ module.project-factory.module.project-factory.google_compute_subnetwork_iam_member.service_account_role_to_vpc_subnets
id: <computed>
etag: <computed>
member: "${local.s_account_fmt}"
project: "aaronlane-pf-test"
region: "us-east4"
role: "roles/compute.networkUser"
subnetwork: "subnet-01"
+ module.project-factory.module.project-factory.google_project.project
id: <computed>
app_engine.#: "1"
app_engine.0.auth_domain: "phoogle.net"
app_engine.0.code_bucket: <computed>
app_engine.0.default_bucket: <computed>
app_engine.0.default_hostname: <computed>
app_engine.0.feature_settings.#: "1"
app_engine.0.feature_settings.0.split_health_checks: "false"
app_engine.0.gcr_domain: <computed>
app_engine.0.location_id: "us-east4"
app_engine.0.name: <computed>
app_engine.0.serving_status: <computed>
app_engine.0.url_dispatch_rule.#: <computed>
auto_create_network: "false"
billing_account: "01E8A0-35F760-5CF02A"
folder_id: <computed>
name: "pf-test-int-full"
number: <computed>
org_id: "826592752744"
policy_data: <computed>
policy_etag: <computed>
project_id: "${local.temp_project_id}"
skip_delete: <computed>
+ module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[0]
id: <computed>
etag: <computed>
member: "${element(local.shared_vpc_users, count.index)}"
project: "aaronlane-pf-test"
role: "roles/compute.networkUser"
+ module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[1]
id: <computed>
etag: <computed>
member: "${element(local.shared_vpc_users, count.index)}"
project: "aaronlane-pf-test"
role: "roles/compute.networkUser"
+ module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[2]
id: <computed>
etag: <computed>
member: "${element(local.shared_vpc_users, count.index)}"
project: "aaronlane-pf-test"
role: "roles/compute.networkUser"
+ module.project-factory.module.project-factory.google_project_iam_member.controlling_group_vpc_membership[3]
id: <computed>
etag: <computed>
member: "${element(local.shared_vpc_users, count.index)}"
project: "aaronlane-pf-test"
role: "roles/compute.networkUser"
+ module.project-factory.module.project-factory.google_project_iam_member.default_service_account_membership
id: <computed>
etag: <computed>
member: "${local.s_account_fmt}"
project: "${local.project_id}"
role: "roles/editor"
+ module.project-factory.module.project-factory.google_project_iam_member.gke_host_agent
id: <computed>
etag: <computed>
member: "${local.gke_s_account_fmt}"
project: "aaronlane-pf-test"
role: "roles/container.hostServiceAgentUser"
+ module.project-factory.module.project-factory.google_project_iam_member.gsuite_group_role
id: <computed>
etag: <computed>
member: "group:pf-test-int-full-editors@phoogle.net"
project: "${local.project_id}"
role: "roles/viewer"
+ module.project-factory.module.project-factory.google_project_service.project_services[0]
id: <computed>
disable_on_destroy: "true"
project: "${local.project_id}"
service: "compute.googleapis.com"
+ module.project-factory.module.project-factory.google_project_service.project_services[1]
id: <computed>
disable_on_destroy: "true"
project: "${local.project_id}"
service: "container.googleapis.com"
+ module.project-factory.module.project-factory.google_resource_manager_lien.lien
id: <computed>
create_time: <computed>
name: <computed>
origin: "project-factory"
parent: "projects/${google_project.project.number}"
reason: "Project Factory lien"
restrictions.#: "1"
restrictions.0: "resourcemanager.projects.delete"
+ module.project-factory.module.project-factory.google_service_account.default_service_account
id: <computed>
account_id: "project-service-account"
display_name: "pf-test-int-full Project Service Account"
email: <computed>
name: <computed>
project: "${local.project_id}"
unique_id: <computed>
+ module.project-factory.module.project-factory.google_service_account_iam_member.service_account_grant_to_group
id: <computed>
etag: <computed>
member: "group:pf-test-int-full-editors@phoogle.net"
role: "roles/iam.serviceAccountUser"
service_account_id: "projects/${local.project_id}/serviceAccounts/${\n google_service_account.default_service_account.email\n }"
+ module.project-factory.module.project-factory.null_resource.delete_default_compute_service_account
id: <computed>
triggers.%: <computed>
+ module.project-factory.module.project-factory.null_resource.preconditions
id: <computed>
triggers.%: "5"
triggers.billing_account: "01E8A0-35F760-5CF02A"
triggers.credentials_path: "/usr/local/google/home/aaronlane/src/github/terraform-google-modules/terraform-google-project-factory/credentials.json"
triggers.folder_id: ""
triggers.org_id: "826592752744"
triggers.shared_vpc: "aaronlane-pf-test"
+ module.project-factory.module.project-factory.random_id.random_project_id_suffix
id: <computed>
b64: <computed>
b64_std: <computed>
b64_url: <computed>
byte_length: "2"
dec: <computed>
hex: <computed>
Plan: 25 to add, 0 to change, 24 to destroy.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment