This repo uses terraform to create below resources in order to deploy a private composer environment in shared VPC.

• Two projects, one for shared VPC and other for composer environment
• One shared VPC and subnets in host project
• Neccesary IAM permissions and firewall rules in order to deploy composer env
• Service Account for composer workers
• Composer env itself

• A folder in org where projects will be created

• A service account which will be used by terraform having below permissions

  • at above folder level
    • "roles/resourcemanager.projectCreator"
    • "roles/compute.xpnAdmin"
  • at org level
    • "roles/browser"
  • At billing account level
    • "roles/billing.admin"
  • At bucket(used to store state) level
    • "roles/storage.objectAdmin"

• User/Service account executing terraform code need to have below permissions on above service account used by terraform.

  • "roles/iam.serviceAccountTokenCreator"

map(object({
    description    = string
    cidr_range     = string
    region         = string
    private_access = bool
    flow_logs      = bool
    secondary_ranges = list(object({
      range_name    = string
      ip_cidr_range = string
    }))
  }))

map(object({
    region                = string
    zone                  = string
    pod_ip_range_name     = string
    service_ip_range_name = string
    subnet                = string
    control_plane_cidr    = string
    web_server_cidr       = string
    cloud_sql_cidr        = string
    tags                  = list(string)
    software_config = object({
      airflow_config_overrides = map(string)
      env_variables            = map(string)
      image_version            = string
      pypi_packages            = map(string)
      python_version           = string
    })
  }))

No outputs.