templates/tfengine/components/org_policies/variables.tf

# Copyright 2021 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

variable "allowed_policy_member_customer_ids" {
  description = "The list of Cloud Identity or G Suite customer IDs corresponding to the domains to allow users from. Must be specified."
}

variable "allowed_shared_vpc_host_projects" {
  description = "The list of allowed shared VPC host projects. Default to allow all if not specified. Supported entry format: under:organizations/ORGANIZATION_ID, under:folders/FOLDER_ID, or projects/PROJECT_ID."
  default     = []
}

variable "allowed_trusted_image_projects" {
  description = "The list of projects that can be used for image storage and disk instantiation for Compute Engine. Default to allow all if not specified. Supported entry format: projects/PROJECT_ID."
  default     = []
}

variable "allowed_ip_forwarding_vms" {
  description = "The list of Compute Engine instances that are allowed IP forwarding. Default to allow all if not specified. Supported entry format: projects/PROJECT_ID/zones/ZONE/instances/INSTANCE."
  default     = []
}

variable "allowed_public_vms" {
  description = "The list of Compute Engine instances that are allowed direct external access (i.e. with an external IP). Default to deny all if not specified. Supported entry format: projects/PROJECT_ID/zones/ZONE/instances/INSTANCE."
  default     = []
}