-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy path13_data_platform.auto.tfvars
More file actions
202 lines (156 loc) · 5.03 KB
/
Copy path13_data_platform.auto.tfvars
File metadata and controls
202 lines (156 loc) · 5.03 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
# Generated by Merlin Studio (https://site.merlin-studio.cloud). Licensed under CC BY-ND 4.0.
# ============================================================================
# BIGQUERY CONFIGURATION
# ============================================================================
# Serverless data warehouse for analytics and machine learning
bigquery_config = {
enabled = true
# Default dataset location
default_location = "EU"
# Encryption Settings
cmek_enabled = true
# Security Features
authorized_datasets = false
column_level_security = false
data_masking = false
}
# BigQuery Dataset Defaults
# Apply these settings when creating new datasets
bigquery_dataset_defaults = {
location = "EU"
access = [
{
role = "OWNER"
special_group = "projectOwners"
},
{
role = "READER"
special_group = "projectReaders"
}
]
labels = {
managed_by = "terraform"
created_by = "landing-zone-wizard"
}
}
# ============================================================================
# CLOUD STORAGE CONFIGURATION
# ============================================================================
# Object storage for any amount of data
cloud_storage_config = {
enabled = true
# Default storage class for new buckets
default_storage_class = "STANDARD"
# Access Control
uniform_bucket_level_access = true
public_access_prevention = "enforced"
# Data Protection
versioning_enabled = true
# Encryption
cmek_enabled = true
# Retention
retention_policy_enabled = false
}
# Cloud Storage Bucket Defaults
# Apply these settings when creating new buckets
gcs_bucket_defaults = {
storage_class = "STANDARD"
location = "US"
uniform_bucket_level_access = true
public_access_prevention = "enforced"
versioning = {
enabled = true
}
labels = {
managed_by = "terraform"
created_by = "landing-zone-wizard"
}
}
# ============================================================================
# CLOUD SQL CONFIGURATION
# ============================================================================
# Managed relational databases (PostgreSQL, MySQL, SQL Server)
cloud_sql_config = {
enabled = false
}
# Cloud SQL is disabled
# Enable in wizard to configure managed databases
# ============================================================================
# PUB/SUB CONFIGURATION
# ============================================================================
# Messaging and event streaming
pubsub_config = {
enabled = false
}
# Pub/Sub is disabled
# Enable in wizard to configure messaging infrastructure
# ============================================================================
# FIRESTORE CONFIGURATION
# ============================================================================
# Serverless NoSQL document database
firestore_config = {
enabled = true
database_type = "firestore_native"
location = "eur3"
# Encryption
cmek_enabled = true
# Data Protection
delete_protection = true
point_in_time_recovery = false
}
# Firestore Instance Defaults
# Apply these settings when creating new Firestore databases
firestore_instance_defaults = {
type = "FIRESTORE_NATIVE"
location_id = "eur3"
point_in_time_recovery_enablement = "POINT_IN_TIME_RECOVERY_DISABLED"
delete_protection_state = "DELETE_PROTECTION_ENABLED"
labels = {
managed_by = "terraform"
created_by = "landing-zone-wizard"
}
}
# ============================================================================
# DATAFLOW CONFIGURATION
# ============================================================================
# Stream and batch data processing
dataflow_config = {
enabled = false
}
# Dataflow is disabled
# Enable in wizard for stream/batch data processing
# ============================================================================
# DATA SERVICES SUMMARY
# ============================================================================
# Summary of enabled data platform services
data_services_enabled = {
bigquery = true
cloud_storage = true
cloud_sql = false
pubsub = false
firestore = true
dataflow = false
}
# CMEK Encryption Status
cmek_status = {
bigquery = true
cloud_storage = true
firestore = true
}
# ============================================================================
# DATA PLATFORM SUMMARY
# ============================================================================
# Summary of data platform configuration
# Enabled Services:
# - BigQuery (Location: EU)
# - Cloud Storage (Class: STANDARD)
# - Firestore (firestore_native, Location: eur3)
# ============================================================================
# Next Steps:
# 1. Review the generated configuration above
# 2. Run: terraform init
# 3. Run: terraform plan -out=13_data_platform.tfplan
# 4. Review the plan carefully
# 5. Run: terraform apply 13_data_platform.tfplan
# 7. Create KMS keys for CMEK encryption
# ============================================================================