mirror of
https://github.com/GSA/notifications-api.git
synced 2025-12-23 00:41:35 -05:00
15f8be7aee
This will also ensure any drift is picked up by our infrastructure verification checks Signed-off-by: Carlo Costino <carlo.costino@gsa.gov>
39 lines
784 B
HCL
39 lines
784 B
HCL
###
|
|
# Target space/org
|
|
###
|
|
|
|
data "cloudfoundry_org" "org" {
|
|
name = var.cf_org_name
|
|
}
|
|
|
|
###
|
|
# Egress Space
|
|
###
|
|
|
|
resource "cloudfoundry_space" "public_egress" {
|
|
allow_ssh = var.allow_ssh
|
|
delete_recursive_allowed = var.delete_recursive_allowed
|
|
name = "${var.cf_restricted_space_name}-egress"
|
|
org = data.cloudfoundry_org.org.id
|
|
}
|
|
|
|
###
|
|
# User roles
|
|
###
|
|
|
|
data "cloudfoundry_user" "users" {
|
|
for_each = var.deployers
|
|
name = each.key
|
|
org_id = data.cloudfoundry_org.org.id
|
|
}
|
|
|
|
locals {
|
|
user_ids = [for user in data.cloudfoundry_user.users : user.id]
|
|
}
|
|
|
|
resource "cloudfoundry_space_users" "deployers" {
|
|
space = cloudfoundry_space.public_egress.id
|
|
managers = local.user_ids
|
|
developers = local.user_ids
|
|
}
|