solutions/experimentation/client-landing-zone/setters.yaml (13 lines of code) (raw):
# Copyright 2021 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#########
apiVersion: v1
kind: ConfigMap
metadata:
name: setters
annotations:
config.kubernetes.io/local-config: "true"
data:
##########################
# Instructions
##########################
#
# Follow instructions specific to each section.
# Project IDs must follow the rules below, additionally,
# if a gatekeeper policy is used to enforce specific naming conventions, refer to its documentation.
# - All IDs should be universally unique.
# - Must be 6 to 30 characters in length.
# - Can only contain lowercase letters, numbers, and hyphens.
# - Must start with a letter.
# - Cannot end with a hyphen.
# - Cannot be in use or previously used; this includes deleted projects.
# - Cannot contain restricted strings, such as google and ssl.
#
##########################
# Client
##########################
#
# Name for the client, lowercase only
# customization: required
client-name: 'client1'
#
# Client folder display name
# customization: required
client-folder-display-name: client-folder-display-name
#
# group to grant viewer permission on client folder
# customization: required
client-folderviewer: 'group:client1@example.com'
#
##########################
# Logging
##########################
#
# logging project id created in core-landing-zone
# customization: required
logging-project-id: logging-project-12345
#
# LoggingLogBucket retention settings
# Set the number of days to retain logs in Cloud Logging buckets
# Set the lock mechanism on the bucket to: true or false
# After a retention policy is locked (true), you can't delete the bucket until every log in the bucket has fulfilled the bucket's retention period
# The values below must be modified to retention-locking-policy: true in a Production setting to implement above mentioned security controls.
# customization: required
retention-locking-policy: "false"
#
# The values below must be modified to retention-in-days: 365 in a Production setting to implement above mentioned security controls.
# customization: required
retention-in-days: "1"
#
##########################
# End of Configurations
##########################