Closed fmichaelobrien closed 2 months ago
Do TEF alignment after 421 https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/issues/387
michaelobrien@mbp7 pbmm-on-gcp-onboarding % git status
On branch gh421-cb-enable
Your branch is up to date with 'origin/gh421-cb-enable'.
Changes to be committed:
(use "git restore --staged <file>..." to unstage)
modified: 0-bootstrap/README.md
renamed: 0-bootstrap/cb.tf.dont_use -> 0-bootstrap/cb.tf
renamed: 0-bootstrap/outputs.tf.dont_use -> 0-bootstrap/outputs.tf
renamed: 0-bootstrap/terraform-local.tf -> 0-bootstrap/terraform-local.tf.example
modified: 0-bootstrap/terraform.example.tfvars
deleted: 0-bootstrap/terraform.mod.tfvars
modified: 1-org/envs/shared/terraform.example.tfvars
deleted: 1-org/envs/shared/terraform.mod.tfvars
modified: 2-environments/terraform.example.tfvars
deleted: 2-environments/terraform.mod.tfvars
deleted: 3-networks-dual-svpc/access_context.auto.mod.tfvars
modified: 3-networks-dual-svpc/common.auto.example.tfvars
deleted: 3-networks-dual-svpc/common.auto.mod.tfvars
deleted: 3-networks-dual-svpc/shared.auto.mod.tfvars
michaelobrien@mbp7 pbmm-on-gcp-onboarding % git commit -m "#421 - 0-boot to 3-net-dual-svpc"
[gh421-cb-enable e3b75d2] #421 - 0-boot to 3-net-dual-svpc
14 files changed, 87 insertions(+), 220 deletions(-)
rename 0-bootstrap/{cb.tf.dont_use => cb.tf} (100%)
rename 0-bootstrap/{outputs.tf.dont_use => outputs.tf} (96%)
rename 0-bootstrap/{terraform-local.tf => terraform-local.tf.example} (54%)
delete mode 100644 0-bootstrap/terraform.mod.tfvars
delete mode 100644 1-org/envs/shared/terraform.mod.tfvars
delete mode 100644 2-environments/terraform.mod.tfvars
delete mode 100644 3-networks-dual-svpc/access_context.auto.mod.tfvars
delete mode 100644 3-networks-dual-svpc/common.auto.mod.tfvars
delete mode 100644 3-networks-dual-svpc/shared.auto.mod.tfvars
michaelobrien@mbp7 pbmm-on-gcp-onboarding % git push origin gh421-cb-enable
Enumerating objects: 22, done.
Counting objects: 100% (22/22), done.
Delta compression using up to 10 threads
Compressing objects: 100% (12/12), done.
Writing objects: 100% (13/13), 4.22 KiB | 4.22 MiB/s, done.
Total 13 (delta 9), reused 0 (delta 0), pack-reused 0
remote: Resolving deltas: 100% (9/9), completed with 8 local objects.
remote:
remote: GitHub found 5 vulnerabilities on GoogleCloudPlatform/pbmm-on-gcp-onboarding's default branch (2 critical, 3 moderate). To find out more, visit:
remote: https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/security/dependabot
remote:
To github.com:GoogleCloudPlatform/pbmm-on-gcp-onboarding.git
d7344f5..e3b75d2 gh421-cb-enable -> gh421-cb-enable
part 2 remaining part
michaelobrien@mbp7 pbmm-on-gcp-onboarding % git status
On branch gh421-cb-enable
Your branch is up to date with 'origin/gh421-cb-enable'.
Changes to be committed:
(use "git restore --staged <file>..." to unstage)
deleted: 3-networks-hub-and-spoke/access_context.auto.mod.tfvars
modified: 3-networks-hub-and-spoke/common.auto.example.tfvars
deleted: 3-networks-hub-and-spoke/common.auto.mod.tfvars
deleted: 3-networks-hub-and-spoke/shared.auto.mod.tfvars
deleted: 4-projects/common.auto.mod.tfvars
modified: 4-projects/development.auto.example.tfvars
deleted: 4-projects/development.auto.mod.tfvars
modified: 4-projects/non-production.auto.example.tfvars
deleted: 4-projects/non-production.auto.mod.tfvars
modified: 4-projects/production.auto.example.tfvars
deleted: 4-projects/production.auto.mod.tfvars
modified: 4-projects/shared.auto.example.tfvars
deleted: 4-projects/shared.auto.mod.tfvars
Testing on existing org - no TEF run before - oldev
downgrade terraform and prep project
michael@cloudshell:~$ gcloud config set project tef-oldev
Updated property [core/project].
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ git checkout gh421-cb-enable
Branch 'gh421-cb-enable' set up to track remote branch 'gh421-cb-enable' from 'origin'.
Switched to a new branch 'gh421-cb-enable'
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ git status
On branch gh421-cb-enable
Your branch is up to date with 'origin/gh421-cb-enable'.
michael@cloudshell:~/tef-oldev/terraform1310 (tef-oldev)$ sudo cp terraform /usr/bin
michael@cloudshell:~/tef-oldev/terraform1310 (tef-oldev)$ cd ..
michael@cloudshell:~/tef-oldev (tef-oldev)$ ls
github terraform1310
michael@cloudshell:~/tef-oldev (tef-oldev)$ terraform --version
Terraform v1.3.10
on linux_amd64
Your version of Terraform is out of date! The latest version
is 1.8.2. You can update by downloading from https://www.terraform.io/downloads.html
michael@cloudshell:~/tef-oldev (tef-oldev)$ cd github/pbmm-on-gcp-onboarding/
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ gcloud services enable cloudresourcemanager.googleapis.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ gcloud services enable cloudbilling.googleapis.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ gcloud services enable iam.googleapis.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ gcloud services enable cloudkms.googleapis.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ gcloud services enable servicenetworking.googleapis.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$
delete groups
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ cd 0-bootstrap/
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ mv terraform.example.tfvars terraform.tfvars
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ mv ./cb.tf.example ./cb.tf
mv: cannot stat './cb.tf.example': No such file or directory
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform init
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform init
Initializing modules...
Downloading registry.terraform.io/terraform-google-modules/gcloud/google 3.4.0 for bootstrap_csr_repo...
terraform plan -input=false -out bootstrap.tfplan
Plan: 271 to add, 0 to change, 0 to destroy.
Changes to Outputs:
+ bootstrap_step_terraform_service_account_email = (known after apply)
+ cloud_build_peered_network_id = (known after apply)
+ cloud_build_private_worker_pool_id = (known after apply)
+ cloud_build_worker_peered_ip_range = "192.168.0.0/24"
+ cloud_build_worker_range_id = (known after apply)
+ cloud_builder_artifact_repo = (known after apply)
+ cloudbuild_project_id = (known after apply)
+ common_config = {
+ billing_account = "REPLACE_ME"
+ bootstrap_folder_name = (known after apply)
+ default_region = "northamerica-northeast1"
+ folder_prefix = "fldr"
+ org_id = "583675367868"
+ parent_folder = "1071946810002"
+ parent_id = "folders/1071946810002"
+ project_prefix = "prj"
}
+ csr_repos = {
+ gcp-bootstrap = {
+ id = (known after apply)
+ name = "gcp-bootstrap"
+ project = (known after apply)
+ url = (known after apply)
}
+ gcp-environments = {
+ id = (known after apply)
+ name = "gcp-environments"
+ project = (known after apply)
+ url = (known after apply)
}
+ gcp-networks = {
+ id = (known after apply)
+ name = "gcp-networks"
+ project = (known after apply)
+ url = (known after apply)
}
+ gcp-org = {
+ id = (known after apply)
+ name = "gcp-org"
+ project = (known after apply)
+ url = (known after apply)
}
+ gcp-policies = {
+ id = (known after apply)
+ name = "gcp-policies"
+ project = (known after apply)
+ url = (known after apply)
}
+ gcp-projects = {
+ id = (known after apply)
+ name = "gcp-projects"
+ project = (known after apply)
+ url = (known after apply)
}
+ tf-cloudbuilder = {
+ id = (known after apply)
+ name = "tf-cloudbuilder"
+ project = (known after apply)
+ url = (known after apply)
}
}
+ environment_step_terraform_service_account_email = (known after apply)
+ gcs_bucket_cloudbuild_artifacts = {
+ bootstrap = (known after apply)
+ env = (known after apply)
+ net = (known after apply)
+ org = (known after apply)
+ proj = (known after apply)
}
+ gcs_bucket_cloudbuild_logs = {
+ bootstrap = (known after apply)
+ env = (known after apply)
+ net = (known after apply)
+ org = (known after apply)
+ proj = (known after apply)
}
+ gcs_bucket_tfstate = (known after apply)
+ networks_step_terraform_service_account_email = (known after apply)
+ optional_groups = {
+ "gcp_global_secrets_admin" = "gcp_global_secrets_admin@obrienlabs.dev"
+ "gcp_kms_admin" = "gcp_kms_admin@obrienlabs.dev"
+ "gcp_network_viewer" = "gcp_network_viewer@obrienlabs.dev"
+ "gcp_scc_admin" = "gcp_scc_admin@obrienlabs.dev"
+ "gcp_security_reviewer" = "gcp_security_reviewer@obrienlabs.dev"
}
+ organization_step_terraform_service_account_email = (known after apply)
+ projects_gcs_bucket_tfstate = (known after apply)
+ projects_step_terraform_service_account_email = (known after apply)
+ required_groups = {
+ "audit_data_users" = "gcp-audit-data@obrienlabs.dev"
+ "billing_data_users" = "gcp-billing-data@obrienlabs.dev"
+ "group_billing_admins" = "gcp-billing-admins@obrienlabs.dev"
+ "group_org_admins" = "gcp-organization-admins@obrienlabs.dev"
+ "monitoring_workspace_users" = "gcp-monitoring-workspace@obrienlabs.dev"
}
+ seed_project_id = (known after apply)
───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
Saved the plan to: bootstrap.tfplan
To perform exactly these actions, run the following command to apply:
terraform apply "bootstrap.tfplan"
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$
total time actual: 50 min to 1821 total time without errors: 23 min
1731 apply - 1 min and group eventually consistent error
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.bootstrap_csr_repo.null_resource.run_destroy_command[0]: Creating...
module.bootstrap_csr_repo.null_resource.run_destroy_command[0]: Creation complete after 0s [id=8617119697150628886]
module.seed_bootstrap.module.seed_project.module.project-factory.random_id.random_project_id_suffix: Creating...
module.tf_private_pool.random_string.suffix: Creating...
module.seed_bootstrap.random_id.suffix: Creating...
random_string.suffix: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.random_id.random_project_id_suffix: Creation complete after 0s [id=d2Y]
random_string.suffix: Creation complete after 0s [id=khce]
module.seed_bootstrap.random_id.suffix: Creation complete after 0s [id=1Io]
module.tf_private_pool.random_string.suffix: Creation complete after 0s [id=rtbh]
module.seed_bootstrap.google_organization_iam_member.org_billing_admin: Creating...
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/resourcemanager.organizationAdmin"]: Creating...
module.optional_group["gcp_kms_admin"].google_cloud_identity_group.group: Creating...
module.seed_bootstrap.google_folder_iam_member.org_admin_service_account_user[0]: Creating...
module.seed_bootstrap.google_organization_iam_binding.billing_creator: Creating...
module.seed_bootstrap.google_folder_iam_member.tmp_project_creator[0]: Creating...
module.optional_group["gcp_global_secrets_admin"].google_cloud_identity_group.group: Creating...
module.seed_bootstrap.google_folder_iam_member.org_admin_serviceusage_consumer[0]: Creating...
google_folder.bootstrap: Creating...
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/billing.user"]: Creating...
module.optional_group["gcp_security_reviewer"].google_cloud_identity_group.group: Creating...
module.required_group["group_billing_admins"].google_cloud_identity_group.group: Creating...
module.optional_group["gcp_scc_admin"].google_cloud_identity_group.group: Creating...
module.optional_group["gcp_network_viewer"].google_cloud_identity_group.group: Creating...
module.required_group["group_org_admins"].google_cloud_identity_group.group: Creating...
module.seed_bootstrap.google_organization_iam_binding.billing_creator: Creation complete after 6s [id=583675367868/roles/billing.creator]
module.required_group["billing_data_users"].google_cloud_identity_group.group: Creating...
module.optional_group["gcp_kms_admin"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/0147n2zr1jao7cf]
module.required_group["monitoring_workspace_users"].google_cloud_identity_group.group: Creating...
module.optional_group["gcp_global_secrets_admin"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/00upglbi2nbvcfg]
module.required_group["audit_data_users"].google_cloud_identity_group.group: Creating...
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/billing.user"]: Still creating... [10s elapsed]
google_folder.bootstrap: Still creating... [10s elapsed]
module.optional_group["gcp_security_reviewer"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/01yyy98l1wj6ed0]
module.optional_group["gcp_scc_admin"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/03oy7u293zd8355]
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/billing.user"]: Creation complete after 10s [id=583675367868/roles/billing.user/group:gcp-organization-admins@obrienlabs.dev]
module.required_group["group_billing_admins"].google_cloud_identity_group.group: Creation complete after 10s [id=groups/03ygebqi24wz8dm]
module.optional_group["gcp_network_viewer"].google_cloud_identity_group.group: Creation complete after 10s [id=groups/03as4poj1zuipxe]
module.required_group["group_org_admins"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/00upglbi2xhs1im]
google_folder.bootstrap: Creation complete after 11s [id=folders/939569880380]
module.required_group["billing_data_users"].google_cloud_identity_group.group: Creation complete after 8s [id=groups/00rjefff1eadqyn]
module.required_group["monitoring_workspace_users"].google_cloud_identity_group.group: Creation complete after 8s [id=groups/039kk8xu0t8cj3l]
module.required_group["audit_data_users"].google_cloud_identity_group.group: Creation complete after 9s [id=groups/014ykbeg1xwweui]
╷
│ Error: Error applying IAM policy for folder "folders/1071946810002": Error setting IAM policy for folder "folders/1071946810002": googleapi: Error 400: Group gcp-organization-admins@obrienlabs.dev does not exist., badRequest
│
│ with module.seed_bootstrap.google_folder_iam_member.tmp_project_creator[0],
│ on .terraform/modules/seed_bootstrap/main.tf line 47, in resource "google_folder_iam_member" "tmp_project_creator":
│ 47: resource "google_folder_iam_member" "tmp_project_creator" {
│
╵
╷
│ Error: Error applying IAM policy for organization "583675367868": Error setting IAM policy for organization "583675367868": googleapi: Error 400: Group gcp-organization-admins@obrienlabs.dev does not exist., badRequest
│
│ with module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/resourcemanager.organizationAdmin"],
│ on .terraform/modules/seed_bootstrap/main.tf line 184, in resource "google_organization_iam_member" "org_admins_group":
│ 184: resource "google_organization_iam_member" "org_admins_group" {
│
╵
╷
│ Error: Error applying IAM policy for organization "583675367868": Error setting IAM policy for organization "583675367868": googleapi: Error 400: Group gcp-billing-admins@obrienlabs.dev does not exist., badRequest
│
│ with module.seed_bootstrap.google_organization_iam_member.org_billing_admin,
│ on .terraform/modules/seed_bootstrap/main.tf line 196, in resource "google_organization_iam_member" "org_billing_admin":
│ 196: resource "google_organization_iam_member" "org_billing_admin" {
│
╵
╷
│ Error: Error applying IAM policy for folder "folders/1071946810002": Error setting IAM policy for folder "folders/1071946810002": googleapi: Error 400: Group gcp-organization-admins@obrienlabs.dev does not exist., badRequest
│
│ with module.seed_bootstrap.google_folder_iam_member.org_admin_service_account_user[0],
│ on .terraform/modules/seed_bootstrap/main.tf line 259, in resource "google_folder_iam_member" "org_admin_service_account_user":
│ 259: resource "google_folder_iam_member" "org_admin_service_account_user" {
│
╵
╷
│ Error: Error applying IAM policy for folder "folders/1071946810002": Error setting IAM policy for folder "folders/1071946810002": googleapi: Error 400: Group gcp-organization-admins@obrienlabs.dev does not exist., badRequest
│
│ with module.seed_bootstrap.google_folder_iam_member.org_admin_serviceusage_consumer[0],
│ on .terraform/modules/seed_bootstrap/main.tf line 267, in resource "google_folder_iam_member" "org_admin_serviceusage_consumer":
│ 267: resource "google_folder_iam_member" "org_admin_serviceusage_consumer" {
│
╵
wait 5 min 1733-1738
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform plan -input=false -out bootstrap.tfplan
Plan: 253 to add, 0 to change, 0 to destroy.
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/resourcemanager.organizationAdmin"]: Creating...
module.seed_bootstrap.google_folder_iam_member.org_admin_service_account_user[0]: Creating...
module.seed_bootstrap.google_folder_iam_member.org_admin_serviceusage_consumer[0]: Creating...
module.seed_bootstrap.google_folder_iam_member.tmp_project_creator[0]: Creating...
module.seed_bootstrap.google_organization_iam_member.org_billing_admin: Creating...
module.seed_bootstrap.google_organization_iam_member.org_admins_group["roles/resourcemanager.organizationAdmin"]: Creation complete after 5s [id=583675367868/roles/resourcemanager.organizationAdmin/group:gcp-organization-admins@obrienlabs.dev]
module.seed_bootstrap.google_folder_iam_member.org_admin_service_account_user[0]: Creation complete after 5s [id=folders/1071946810002/roles/iam.serviceAccountUser/group:gcp-organization-admins@obrienlabs.dev]
module.seed_bootstrap.google_organization_iam_member.org_billing_admin: Creation complete after 10s [id=583675367868/roles/billing.admin/group:gcp-billing-admins@obrienlabs.dev]
module.seed_bootstrap.google_folder_iam_member.org_admin_serviceusage_consumer[0]: Still creating... [10s elapsed]
module.seed_bootstrap.google_folder_iam_member.tmp_project_creator[0]: Still creating... [10s elapsed]
module.seed_bootstrap.google_folder_iam_member.tmp_project_creator[0]: Creation complete after 15s [id=folders/1071946810002/roles/resourcemanager.projectCreator/group:gcp-organization-admins@obrienlabs.dev]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Creating...
module.seed_bootstrap.google_folder_iam_member.org_admin_serviceusage_consumer[0]: Creation complete after 15s [id=folders/1071946810002/roles/serviceusage.serviceUsageConsumer/group:gcp-organization-admins@obrienlabs.dev]
╷
│ Error: failed pre-requisites: failed to check permissions on billing account "billingAccounts/REPLACE_ME": googleapi: Error 400: Request contains an invalid argument., badRequest
│
│ with module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main,
│ on .terraform/modules/seed_bootstrap.seed_project/modules/core_project_factory/main.tf line 73, in resource "google_project" "main":
│ 73: resource "google_project" "main" {
│
forgot biling_id
Plan: 248 to add, 0 to change, 0 to destroy.
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
3:30 min for project factory
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [30s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [40s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [50s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m0s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m30s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m40s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [1m50s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m0s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m30s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m40s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [2m50s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [3m0s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [3m10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [3m20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Still creating... [3m30s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.google_project.main: Creation complete after 3m34s [id=projects/prj-b-seed-7766]
module.seed_bootstrap.module.seed_project.module.project-factory.google_resource_manager_lien.lien[0]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["compute.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["essentialcontacts.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudkms.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["assuredworkloads.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["securitycenter.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.google_resource_manager_lien.lien[0]: Creation complete after 1s [id=p28906719611-ld59d00a4-0c6b-4113-a36b-f97eaf4de4f9]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["compute.googleapis.com"]: Creation complete after 3s [id=prj-b-seed-7766/compute.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["essentialcontacts.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudkms.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["assuredworkloads.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["securitycenter.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["assuredworkloads.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["essentialcontacts.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudkms.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["securitycenter.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/cloudbilling.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["securitycenter.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/securitycenter.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/storage-api.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/cloudresourcemanager.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Creation complete after 20s [id=prj-b-seed-7766/admin.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/billingbudgets.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["assuredworkloads.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/assuredworkloads.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["essentialcontacts.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/essentialcontacts.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudkms.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/cloudkms.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudasset.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iamcredentials.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["pubsub.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["accesscontextmanager.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/bigquery.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudasset.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iamcredentials.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["pubsub.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["accesscontextmanager.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudasset.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iamcredentials.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["pubsub.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["accesscontextmanager.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["accesscontextmanager.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/accesscontextmanager.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iamcredentials.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/iamcredentials.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/servicenetworking.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/appengine.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["pubsub.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/pubsub.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/cloudbuild.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["cloudasset.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/cloudasset.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/serviceusage.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/iam.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/logging.googleapis.com]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Still creating... [10s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Still creating... [20s elapsed]
module.seed_bootstrap.module.seed_project.module.project-factory.module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Creation complete after 21s [id=prj-b-seed-7766/monitoring.googleapis.com]
module.seed_bootstrap.module.kms[0].google_kms_key_ring.key_ring: Creating...
module.seed_bootstrap.data.google_storage_project_service_account.gcs_account: Reading...
module.seed_bootstrap.module.seed_project.module.project-factory.google_project_default_service_accounts.default_service_accounts[0]: Creating...
module.seed_bootstrap.module.enable_cross_project_service_account_usage.google_project_organization_policy.project_policy_boolean[0]: Creating...
google_service_account.terraform-env-sa["net"]: Creating...
google_service_account.terraform-env-sa["org"]: Creating...
google_service_account.terraform-env-sa["env"]: Creating...
google_service_account.terraform-env-sa["proj"]: Creating...
google_service_account.terraform-env-sa["bootstrap"]: Creating...
module.seed_bootstrap.module.seed_project.module.project-factory.google_project_default_service_accounts.default_service_accounts[0]: Creation complete after 0s [id=projects/prj-b-seed-7766]
module.seed_bootstrap.module.kms[0].google_kms_key_ring.key_ring: Creation complete after 1s [id=projects/prj-b-seed-7766/locations/northamerica-northeast1/keyRings/prj-keyring]
module.seed_bootstrap.module.kms[0].google_kms_crypto_key.key[0]: Creating...
module.seed_bootstrap.module.kms[0].google_kms_crypto_key.key[0]: Creation complete after 0s [id=projects/prj-b-seed-7766/locations/northamerica-northeast1/keyRings/prj-keyring/cryptoKeys/prj-key]
google_service_account.terraform-env-sa["net"]: Creation complete after 1s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_bootstrap.data.google_storage_project_service_account.gcs_account: Read complete after 1s [id=service-28906719611@gs-project-accounts.iam.gserviceaccount.com]
google_service_account.terraform-env-sa["proj"]: Creation complete after 1s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_bootstrap.module.kms[0].google_kms_crypto_key_iam_binding.decrypters[0]: Creating...
module.seed_bootstrap.module.kms[0].google_kms_crypto_key_iam_binding.encrypters[0]: Creating...
google_service_account.terraform-env-sa["bootstrap"]: Creation complete after 1s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_bootstrap.module.enable_cross_project_service_account_usage.google_project_organization_policy.project_policy_boolean[0]: Creation complete after 1s [id=prj-b-seed-7766:constraints/iam.disableCrossProjectServiceAccountUsage]
google_service_account.terraform-env-sa["org"]: Creation complete after 2s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_account_sink: Creating...
google_service_account.terraform-env-sa["env"]: Creation complete after 2s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.tf_billing_user["proj"]: Creating...
google_billing_account_iam_member.tf_billing_user["net"]: Creating...
google_billing_account_iam_member.tf_billing_user["org"]: Creating...
google_billing_account_iam_member.tf_billing_user["bootstrap"]: Creating...
google_billing_account_iam_member.tf_billing_user["env"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/artifactregistry.admin"]: Creating...
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/resourcemanager.projectDeleter"]: Creating...
google_billing_account_iam_member.billing_account_sink: Creation complete after 4s [id=019283-6F1AB5-7AD576/roles/logging.configWriter/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["org"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/artifactregistry.admin"]: Creation complete after 4s [id=folders/1071946810002/roles/artifactregistry.admin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Creating...
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/resourcemanager.projectDeleter"]: Creation complete after 7s [id=prj-b-seed-7766/roles/resourcemanager.projectDeleter/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityPolicyAdmin"]: Creating...
module.seed_bootstrap.module.kms[0].google_kms_crypto_key_iam_binding.decrypters[0]: Creation complete after 9s [id=projects/prj-b-seed-7766/locations/northamerica-northeast1/keyRings/prj-keyring/cryptoKeys/prj-key/roles/cloudkms.cryptoKeyDecrypter]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Creating...
module.seed_bootstrap.module.kms[0].google_kms_crypto_key_iam_binding.encrypters[0]: Creation complete after 9s [id=projects/prj-b-seed-7766/locations/northamerica-northeast1/keyRings/prj-keyring/cryptoKeys/prj-key/roles/cloudkms.cryptoKeyEncrypter]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creating...
module.parent_iam_member["org"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creation complete after 5s [id=folders/1071946810002/roles/resourcemanager.folderAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Creating...
google_billing_account_iam_member.tf_billing_user["proj"]: Still creating... [10s elapsed]
google_billing_account_iam_member.tf_billing_user["net"]: Still creating... [10s elapsed]
google_billing_account_iam_member.tf_billing_user["org"]: Still creating... [10s elapsed]
google_billing_account_iam_member.tf_billing_user["bootstrap"]: Still creating... [10s elapsed]
google_billing_account_iam_member.tf_billing_user["env"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityPolicyAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Still creating... [10s elapsed]
google_billing_account_iam_member.tf_billing_user["proj"]: Still creating... [20s elapsed]
google_billing_account_iam_member.tf_billing_user["net"]: Still creating... [20s elapsed]
google_billing_account_iam_member.tf_billing_user["org"]: Still creating... [20s elapsed]
google_billing_account_iam_member.tf_billing_user["bootstrap"]: Still creating... [20s elapsed]
google_billing_account_iam_member.tf_billing_user["env"]: Still creating... [20s elapsed]
google_billing_account_iam_member.tf_billing_user["proj"]: Creation complete after 24s [id=019283-6F1AB5-7AD576/roles/billing.user/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.xpnAdmin"]: Creating...
google_billing_account_iam_member.tf_billing_user["net"]: Creation complete after 24s [id=019283-6F1AB5-7AD576/roles/billing.user/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityResourceAdmin"]: Creating...
google_billing_account_iam_member.tf_billing_user["bootstrap"]: Creation complete after 24s [id=019283-6F1AB5-7AD576/roles/billing.user/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderViewer"]: Creating...
google_billing_account_iam_member.tf_billing_user["org"]: Creation complete after 24s [id=019283-6F1AB5-7AD576/roles/billing.user/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["net"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creating...
google_billing_account_iam_member.tf_billing_user["env"]: Creation complete after 24s [id=019283-6F1AB5-7AD576/roles/billing.user/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["bootstrap"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityPolicyAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Creation complete after 27s [id=folders/1071946810002/roles/compute.networkAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudkms.admin"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityPolicyAdmin"]: Creation complete after 24s [id=folders/1071946810002/roles/compute.orgSecurityPolicyAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["net"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/storage.objectAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.parent_iam_member["env"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/dns.admin"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.networkAdmin"]: Creation complete after 24s [id=folders/1071946810002/roles/compute.networkAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["proj"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.xpnAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityResourceAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderViewer"]: Still creating... [10s elapsed]
module.parent_iam_member["bootstrap"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [30s elapsed]
module.seed_project_iam_member["proj"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/storage.objectAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["env"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Still creating... [30s elapsed]
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudkms.admin"]: Creation complete after 8s [id=prj-b-seed-7766/roles/cloudkms.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["org"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creating...
module.parent_iam_member["env"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [10s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/dns.admin"]: Still creating... [10s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.xpnAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityResourceAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderViewer"]: Still creating... [20s elapsed]
module.parent_iam_member["bootstrap"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [20s elapsed]
module.seed_project_iam_member["org"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/storage.objectAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.serviceAccountAdmin"]: Creating...
module.seed_project_iam_member["env"].google_project_iam_member.project_parent_iam["roles/storage.objectAdmin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/storage.objectAdmin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/storage.admin"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [40s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Still creating... [40s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creation complete after 42s [id=folders/1071946810002/roles/resourcemanager.folderAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.securityAdmin"]: Creation complete after 41s [id=folders/1071946810002/roles/compute.securityAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creating...
module.parent_iam_member["env"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [20s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/dns.admin"]: Still creating... [20s elapsed]
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/storage.admin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/storage.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Creating...
module.seed_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.serviceAccountAdmin"]: Creation complete after 7s [id=prj-b-seed-7766/roles/iam.serviceAccountAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Creating...
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.xpnAdmin"]: Still creating... [30s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityResourceAdmin"]: Still creating... [30s elapsed]
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderViewer"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creation complete after 4s [id=583675367868/roles/resourcemanager.organizationAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creating...
module.parent_iam_member["bootstrap"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Still creating... [30s elapsed]
module.parent_iam_member["proj"].google_folder_iam_member.folder_parent_iam["roles/compute.xpnAdmin"]: Creation complete after 35s [id=folders/1071946810002/roles/compute.xpnAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/compute.orgSecurityResourceAdmin"]: Creation complete after 35s [id=folders/1071946810002/roles/compute.orgSecurityResourceAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderViewer"]: Creation complete after 35s [id=folders/1071946810002/roles/resourcemanager.folderViewer/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creating...
module.parent_iam_member["bootstrap"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creation complete after 35s [id=folders/1071946810002/roles/resourcemanager.folderAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creating...
module.parent_iam_member["net"].google_folder_iam_member.folder_parent_iam["roles/dns.admin"]: Creation complete after 29s [id=folders/1071946810002/roles/dns.admin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Creating...
module.parent_iam_member["env"].google_folder_iam_member.folder_parent_iam["roles/resourcemanager.folderAdmin"]: Creation complete after 29s [id=folders/1071946810002/roles/resourcemanager.folderAdmin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Creating...
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Still creating... [10s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [10s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [10s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [10s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [10s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creation complete after 22s [id=583675367868/roles/accesscontextmanager.policyAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Still creating... [20s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [20s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [20s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [20s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [20s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Still creating... [30s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [30s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [30s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [30s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [30s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Still creating... [40s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/orgpolicy.policyAdmin"]: Creation complete after 45s [id=583675367868/roles/orgpolicy.policyAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.notificationConfigEditor"]: Creation complete after 45s [id=583675367868/roles/securitycenter.notificationConfigEditor/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Creating...
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creation complete after 44s [id=583675367868/roles/browser/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Creating...
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [40s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [40s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [40s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Still creating... [40s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Still creating... [30s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creation complete after 43s [id=583675367868/roles/browser/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creation complete after 43s [id=583675367868/roles/browser/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Creating...
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creation complete after 44s [id=583675367868/roles/accesscontextmanager.policyAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Creating...
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creation complete after 44s [id=583675367868/roles/browser/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Creation complete after 43s [id=583675367868/roles/resourcemanager.tagUser/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creating...
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagUser"]: Creation complete after 43s [id=583675367868/roles/resourcemanager.tagUser/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Still creating... [10s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [10s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Still creating... [40s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Still creating... [10s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [10s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [10s elapsed]
module.org_iam_member["env"].google_organization_iam_member.org_parent_iam["roles/assuredworkloads.admin"]: Creation complete after 45s [id=583675367868/roles/assuredworkloads.admin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Still creating... [20s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [20s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Still creating... [20s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [20s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Still creating... [30s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [30s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Still creating... [30s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [30s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [30s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Still creating... [40s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [40s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/essentialcontacts.admin"]: Creation complete after 45s [id=583675367868/roles/essentialcontacts.admin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/compute.xpnAdmin"]: Creating...
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Still creating... [40s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/logging.configWriter"]: Creation complete after 45s [id=583675367868/roles/logging.configWriter/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationViewer"]: Creating...
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Still creating... [40s elapsed]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Still creating... [40s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Creation complete after 45s [id=583675367868/roles/serviceusage.serviceUsageConsumer/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.sourcesEditor"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [30s elapsed]
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creation complete after 46s [id=583675367868/roles/accesscontextmanager.policyAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.tagAdmin"]: Creation complete after 46s [id=583675367868/roles/resourcemanager.tagAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_bootstrap.google_folder_iam_binding.project_creator[0]: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/cloudasset.owner"]: Creation complete after 45s [id=583675367868/roles/cloudasset.owner/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["proj"]: Creating...
module.org_iam_member["proj"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creation complete after 45s [id=583675367868/roles/resourcemanager.organizationAdmin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["net"]: Creating...
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/browser"]: Creation complete after 45s [id=583675367868/roles/browser/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["org"]: Creating...
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/serviceusage.serviceUsageConsumer"]: Creation complete after 46s [id=583675367868/roles/serviceusage.serviceUsageConsumer/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["bootstrap"]: Creating...
module.seed_bootstrap.google_folder_iam_binding.project_creator[0]: Creation complete after 4s [id=folders/1071946810002/roles/resourcemanager.projectCreator]
google_billing_account_iam_member.billing_admin_user["env"]: Creating...
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/compute.xpnAdmin"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationViewer"]: Still creating... [10s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.sourcesEditor"]: Still creating... [10s elapsed]
google_billing_account_iam_member.billing_admin_user["net"]: Creation complete after 8s [id=019283-6F1AB5-7AD576/roles/billing.admin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.seed_bootstrap.google_storage_bucket.org_terraform_state: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Still creating... [40s elapsed]
module.seed_bootstrap.google_storage_bucket.org_terraform_state: Creation complete after 1s [id=bkt-prj-b-seed-tfstate-d48a]
module.seed_bootstrap.google_storage_bucket_iam_member.orgadmins_state_iam[0]: Creating...
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Still creating... [10s elapsed]
google_billing_account_iam_member.billing_admin_user["proj"]: Still creating... [10s elapsed]
google_billing_account_iam_member.billing_admin_user["org"]: Still creating... [10s elapsed]
google_billing_account_iam_member.billing_admin_user["bootstrap"]: Still creating... [10s elapsed]
module.seed_bootstrap.google_storage_bucket_iam_member.orgadmins_state_iam[0]: Creation complete after 4s [id=b/bkt-prj-b-seed-tfstate-d48a/roles/storage.admin/group:gcp-organization-admins@obrienlabs.dev]
module.gcp_projects_state_bucket.google_storage_bucket.bucket: Creating...
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/accesscontextmanager.policyAdmin"]: Creation complete after 45s [id=583675367868/roles/accesscontextmanager.policyAdmin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_source.module.cloudbuild_project.module.project-factory.random_id.random_project_id_suffix: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.random_id.random_project_id_suffix: Creation complete after 0s [id=mzw]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Creating...
module.gcp_projects_state_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-seed-7766-gcp-projects-tfstate]
google_billing_account_iam_member.billing_admin_user["env"]: Still creating... [10s elapsed]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/compute.xpnAdmin"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationViewer"]: Still creating... [20s elapsed]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.sourcesEditor"]: Still creating... [20s elapsed]
google_billing_account_iam_member.billing_admin_user["proj"]: Creation complete after 17s [id=019283-6F1AB5-7AD576/roles/billing.admin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["net"].google_organization_iam_member.org_parent_iam["roles/compute.xpnAdmin"]: Creation complete after 23s [id=583675367868/roles/compute.xpnAdmin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationViewer"]: Creation complete after 23s [id=583675367868/roles/resourcemanager.organizationViewer/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["org"].google_organization_iam_member.org_parent_iam["roles/securitycenter.sourcesEditor"]: Creation complete after 24s [id=583675367868/roles/securitycenter.sourcesEditor/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.org_iam_member["bootstrap"].google_organization_iam_member.org_parent_iam["roles/resourcemanager.organizationAdmin"]: Creation complete after 19s [id=583675367868/roles/resourcemanager.organizationAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["org"]: Still creating... [20s elapsed]
google_billing_account_iam_member.billing_admin_user["bootstrap"]: Still creating... [20s elapsed]
google_billing_account_iam_member.billing_admin_user["org"]: Creation complete after 21s [id=019283-6F1AB5-7AD576/roles/billing.admin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["bootstrap"]: Creation complete after 20s [id=019283-6F1AB5-7AD576/roles/billing.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
google_billing_account_iam_member.billing_admin_user["env"]: Creation complete after 17s [id=019283-6F1AB5-7AD576/roles/billing.admin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_source.module.cloudbuild_project.module.pro
1751 cicd project started
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [30s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [40s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [50s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [1m0s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [1m10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [1m20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [1m30s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [1m40s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Still creating... [3m30s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.google_project.main: Creation complete after 3m33s [id=projects/prj-b-cicd-khce]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["sourcerepo.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["workflows.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.google_service_account.default_service_account[0]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["compute.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["dns.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.google_service_account.default_service_account[0]: Creation complete after 1s [id=projects/prj-b-cicd-khce/serviceAccounts/project-service-account@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["compute.googleapis.com"]: Creation complete after 3s [id=prj-b-cicd-khce/compute.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["sourcerepo.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["dns.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["workflows.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["dns.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["sourcerepo.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["workflows.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["sourcerepo.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/sourcerepo.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbilling.googleapis.com"]: Creation complete after 20s [id=prj-b-cicd-khce/cloudbilling.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["dns.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/dns.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["billingbudgets.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/billingbudgets.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["workflows.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/workflows.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/serviceusage.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/cloudresourcemanager.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudscheduler.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["appengine.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/appengine.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["admin.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/admin.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["artifactregistry.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["servicenetworking.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/servicenetworking.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudscheduler.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["artifactregistry.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Still creating... [10s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudscheduler.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["artifactregistry.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Still creating... [20s elapsed]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["artifactregistry.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/artifactregistry.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["storage-api.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/storage-api.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["logging.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/logging.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["bigquery.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/bigquery.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["iam.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/iam.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudscheduler.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/cloudscheduler.googleapis.com]
module.tf_source.module.cloudbuild_project.module.project-factory.module.project_services.google_project_service.project_services["cloudbuild.googleapis.com"]: Creation complete after 21s [id=prj-b-cicd-khce/cloudbuild.googleapis.com]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-environments"]: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.google_project_default_service_accounts.default_service_accounts[0]: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-policies"]: Creating...
module.tf_source.google_project_iam_member.org_admins_cloudbuild_editor: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-org"]: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["tf-cloudbuilder"]: Creating...
module.tf_source.google_project_iam_member.org_admins_source_repo_admin[0]: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-projects"]: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-networks"]: Creating...
module.tf_source.module.cloudbuild_bucket.google_storage_bucket.bucket: Creating...
module.tf_source.module.cloudbuild_project.module.project-factory.google_project_default_service_accounts.default_service_accounts[0]: Creation complete after 0s [id=projects/prj-b-cicd-khce]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-bootstrap"]: Creating...
module.tf_source.module.cloudbuild_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=prj-b-cicd-khce_cloudbuild]
module.tf_source.google_project_iam_member.org_admins_cloudbuild_viewer: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-policies"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/gcp-policies]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-projects"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/gcp-projects]
module.tf_source.google_sourcerepo_repository.gcp_repo["tf-cloudbuilder"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/tf-cloudbuilder]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-environments"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/gcp-environments]
module.tf_source.google_storage_bucket_iam_member.cloudbuild_iam: Creating...
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-org"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/gcp-org]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-networks"]: Creation complete after 2s [id=projects/prj-b-cicd-khce/repos/gcp-networks]
module.tf_source.google_sourcerepo_repository.gcp_repo["gcp-bootstrap"]: Creation complete after 3s [id=projects/prj-b-cicd-khce/repos/gcp-bootstrap]
module.tf_source.google_storage_bucket_iam_member.cloudbuild_iam: Creation complete after 4s [id=b/prj-b-cicd-khce_cloudbuild/roles/storage.admin/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
module.tf_source.google_project_iam_member.org_admins_cloudbuild_viewer: Creation complete after 7s [id=prj-b-cicd-khce/roles/viewer/group:gcp-organization-admins@obrienlabs.dev]
module.tf_source.google_project_iam_member.org_admins_source_repo_admin[0]: Creation complete after 8s [id=prj-b-cicd-khce/roles/source.admin/group:gcp-organization-admins@obrienlabs.dev]
module.tf_source.google_project_iam_member.org_admins_cloudbuild_editor: Creation complete after 8s [id=prj-b-cicd-khce/roles/cloudbuild.builds.editor/group:gcp-organization-admins@obrienlabs.dev]
google_sourcerepo_repository_iam_member.member["env"]: Creating...
module.bootstrap_csr_repo.null_resource.run_command[0]: Creating...
google_sourcerepo_repository_iam_member.member["net"]: Creating...
google_sourcerepo_repository_iam_member.member["bootstrap"]: Creating...
google_sourcerepo_repository_iam_member.member["org"]: Creating...
module.tf_cloud_builder.google_service_account.cb_sa[0]: Creating...
google_sourcerepo_repository_iam_member.member["proj"]: Creating...
module.tf_cloud_builder.google_service_account.workflow_sa[0]: Creating...
module.bootstrap_csr_repo.null_resource.run_command[0]: Provisioning with 'local-exec'...
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): Executing: ["/bin/sh" "-c" "PATH=/google-cloud-sdk/bin:$PATH\n./scripts/push-to-repo.sh prj-b-cicd-khce tf-cloudbuilder ./Dockerfile\n"]
module.tf_cloud_builder.module.bucket.google_storage_bucket.bucket: Creating...
module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo: Creating...
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + '[' 3 -lt 3 ']'
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + CSR_PROJECT_ID=prj-b-cicd-khce
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + CSR_NAME=tf-cloudbuilder
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + DOCKERFILE_PATH=./Dockerfile
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): ++ mktemp -d
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + tmp_dir=/tmp/tmp.CIn0o4hCiw
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + gcloud source repos clone tf-cloudbuilder /tmp/tmp.CIn0o4hCiw --project prj-b-cicd-khce
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): Cloning into '/tmp/tmp.CIn0o4hCiw'...
module.tf_cloud_builder.module.bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-tf-cloudbuilder-build-logs]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.serviceAccountAdmin"]: Creating...
module.tf_cloud_builder.google_service_account.workflow_sa[0]: Creation complete after 1s [id=projects/prj-b-cicd-khce/serviceAccounts/terraform-runner-workflow-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.workerPoolOwner"]: Creating...
module.tf_cloud_builder.google_service_account.cb_sa[0]: Creation complete after 1s [id=projects/prj-b-cicd-khce/serviceAccounts/tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudscheduler.admin"]: Creating...
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): warning: You appear to have cloned an empty repository.
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): Project [prj-b-cicd-khce] repository [tf-cloudbuilder] was cloned to [/tmp/tmp.CIn0o4hCiw].
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + cp ./Dockerfile /tmp/tmp.CIn0o4hCiw
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + pushd /tmp/tmp.CIn0o4hCiw
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): /tmp/tmp.CIn0o4hCiw ~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git config credential.helper gcloud.sh
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git config init.defaultBranch main
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git config user.email terraform-robot@example.com
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git config user.name 'TF Robot'
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git checkout main
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): error: pathspec 'main' did not match any file(s) known to git
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git checkout -b main
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): Switched to a new branch 'main'
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git add Dockerfile
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git commit -m 'Initialize tf dockerfile repo'
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): [main (root-commit) 1be6671] Initialize tf dockerfile repo
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): 1 file changed, 39 insertions(+)
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): create mode 100644 Dockerfile
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): + git push origin main -f
google_sourcerepo_repository_iam_member.member["env"]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/gcp-policies/roles/viewer/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.builds.editor"]: Creating...
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): remote: Waiting for private key checker: 1/1 objects left
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): To https://source.developers.google.com/p/prj-b-cicd-khce/r/tf-cloudbuilder
module.bootstrap_csr_repo.null_resource.run_command[0] (local-exec): * [new branch] main -> main
module.bootstrap_csr_repo.null_resource.run_command[0]: Creation complete after 7s [id=4020776437807909593]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/source.admin"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudscheduler.admin"]: Creation complete after 6s [id=prj-b-cicd-khce/roles/cloudscheduler.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/storage.admin"]: Creating...
google_sourcerepo_repository_iam_member.member["bootstrap"]: Still creating... [10s elapsed]
google_sourcerepo_repository_iam_member.member["net"]: Still creating... [10s elapsed]
google_sourcerepo_repository_iam_member.member["org"]: Still creating... [10s elapsed]
google_sourcerepo_repository_iam_member.member["proj"]: Still creating... [10s elapsed]
module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/artifactregistry.admin"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.serviceAccountAdmin"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.workerPoolOwner"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.workerPoolOwner"]: Creation complete after 12s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolOwner/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/dns.admin"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.serviceAccountAdmin"]: Creation complete after 12s [id=prj-b-cicd-khce/roles/iam.serviceAccountAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/resourcemanager.projectDeleter"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.builds.editor"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/source.admin"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/cloudbuild.builds.editor"]: Creation complete after 13s [id=prj-b-cicd-khce/roles/cloudbuild.builds.editor/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/workflows.admin"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/source.admin"]: Creation complete after 11s [id=prj-b-cicd-khce/roles/source.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.workloadIdentityPoolAdmin"]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/storage.admin"]: Still creating... [10s elapsed]
google_sourcerepo_repository_iam_member.member["net"]: Creation complete after 19s [id=projects/prj-b-cicd-khce/repos/gcp-policies/roles/viewer/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/compute.networkAdmin"]: Creating...
google_sourcerepo_repository_iam_member.member["proj"]: Creation complete after 19s [id=projects/prj-b-cicd-khce/repos/gcp-policies/roles/viewer/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_private_pool.module.peered_network[0].module.vpc.google_compute_network.network: Creating...
google_sourcerepo_repository_iam_member.member["org"]: Creation complete after 20s [id=projects/prj-b-cicd-khce/repos/gcp-policies/roles/viewer/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_project_iam_member.invoke_workflow_scheduler: Creating...
google_sourcerepo_repository_iam_member.member["bootstrap"]: Creation complete after 20s [id=projects/prj-b-cicd-khce/repos/gcp-policies/roles/viewer/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_project_iam_member.trigger_builds: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/artifactregistry.admin"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/artifactregistry.admin"]: Creation complete after 11s [id=prj-b-cicd-khce/roles/artifactregistry.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_workflows_workflow.builder: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/storage.admin"]: Creation complete after 13s [id=prj-b-cicd-khce/roles/storage.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_service_account_iam_member.use_cb_sa: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/dns.admin"]: Still creating... [10s elapsed]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/resourcemanager.projectDeleter"]: Still creating... [10s elapsed]
module.tf_cloud_builder.google_service_account_iam_member.use_cb_sa: Creation complete after 4s [id=projects/prj-b-cicd-khce/serviceAccounts/tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:terraform-runner-workflow-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_cloud_builder.google_project_iam_member.logs_writer: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/resourcemanager.projectDeleter"]: Creation complete after 14s [id=prj-b-cicd-khce/roles/resourcemanager.projectDeleter/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_sourcerepo_repository_iam_member.member[0]: Creating...
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/dns.admin"]: Creation complete after 14s [id=prj-b-cicd-khce/roles/dns.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_storage_bucket_iam_member.member: Creating...
module.tf_cloud_builder.google_project_iam_member.trigger_builds: Creation complete after 7s [id=prj-b-cicd-khce/roles/cloudbuild.builds.editor/serviceAccount:terraform-runner-workflow-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/workflows.admin"]: Creation complete after 9s [id=prj-b-cicd-khce/roles/workflows.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/iam.workloadIdentityPoolAdmin"]: Creation complete after 9s [id=prj-b-cicd-khce/roles/iam.workloadIdentityPoolAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.cicd_project_iam_member["bootstrap"].google_project_iam_member.project_parent_iam["roles/compute.networkAdmin"]: Creation complete after 8s [id=prj-b-cicd-khce/roles/compute.networkAdmin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.bootstrap_projects_remove_editor["seed"].google_project_iam_binding.iam_remove["roles/editor"]: Creating...
module.bootstrap_projects_remove_editor["cicd"].google_project_iam_binding.iam_remove["roles/editor"]: Creating...
module.tf_cloud_builder.google_project_iam_member.invoke_workflow_scheduler: Creation complete after 7s [id=prj-b-cicd-khce/roles/workflows.invoker/serviceAccount:terraform-runner-workflow-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_private_pool.module.peered_network[0].module.vpc.google_compute_network.network: Still creating... [11s elapsed]
module.tf_cloud_builder.google_sourcerepo_repository_iam_member.member[0]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/tf-cloudbuilder/roles/viewer/serviceAccount:tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_cloud_builder.google_storage_bucket_iam_member.member: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-tf-cloudbuilder-build-logs/roles/storage.admin/serviceAccount:tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_cloud_builder.google_workflows_workflow.builder: Still creating... [10s elapsed]
module.bootstrap_projects_remove_editor["cicd"].google_project_iam_binding.iam_remove["roles/editor"]: Creation complete after 6s [id=prj-b-cicd-khce/roles/editor]
module.tf_cloud_builder.google_project_iam_member.logs_writer: Creation complete after 8s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.bootstrap_projects_remove_editor["seed"].google_project_iam_binding.iam_remove["roles/editor"]: Creation complete after 7s [id=prj-b-seed-7766/roles/editor]
module.tf_cloud_builder.google_workflows_workflow.builder: Creation complete after 13s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/workflows/terraform-runner-workflow]
module.tf_cloud_builder.google_cloud_scheduler_job.trigger_workflow: Creating...
module.tf_private_pool.module.peered_network[0].module.vpc.google_compute_network.network: Still creating... [21s elapsed]
module.tf_private_pool.module.peered_network[0].module.vpc.google_compute_network.network: Creation complete after 23s [id=projects/prj-b-cicd-khce/global/networks/vpc-b-cbpools]
module.tf_private_pool.google_dns_policy.default_policy[0]: Creating...
module.tf_private_pool.google_compute_global_address.worker_pool_range[0]: Creating...
module.tf_private_pool.module.peered_network[0].module.subnets.google_compute_subnetwork.subnetwork["northamerica-northeast1/sb-b-cbpools-northamerica-northeast1"]: Creating...
module.tf_private_pool.google_dns_policy.default_policy[0]: Creation complete after 1s [id=projects/prj-b-cicd-khce/policies/dp-b-cbpools-default-policy]
module.tf_cloud_builder.google_cloud_scheduler_job.trigger_workflow: Creation complete after 10s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/jobs/trigger-terraform-runner-workflow]
module.tf_private_pool.google_compute_global_address.worker_pool_range[0]: Still creating... [10s elapsed]
module.tf_private_pool.module.peered_network[0].module.subnets.google_compute_subnetwork.subnetwork["northamerica-northeast1/sb-b-cbpools-northamerica-northeast1"]: Still creating... [10s elapsed]
module.tf_private_pool.google_compute_global_address.worker_pool_range[0]: Creation complete after 11s [id=projects/prj-b-cicd-khce/global/addresses/ga-b-cbpools-worker-pool-range]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Creating...
module.tf_private_pool.module.firewall_rules[0].google_compute_firewall.rules["fw-b-cbpools-100-i-a-all-all-all-service-networking"]: Creating...
module.tf_private_pool.module.peered_network[0].module.subnets.google_compute_subnetwork.subnetwork["northamerica-northeast1/sb-b-cbpools-northamerica-northeast1"]: Still creating... [20s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [10s elapsed]
module.tf_private_pool.module.firewall_rules[0].google_compute_firewall.rules["fw-b-cbpools-100-i-a-all-all-all-service-networking"]: Still creating... [10s elapsed]
module.tf_private_pool.module.firewall_rules[0].google_compute_firewall.rules["fw-b-cbpools-100-i-a-all-all-all-service-networking"]: Creation complete after 11s [id=projects/prj-b-cicd-khce/global/firewalls/fw-b-cbpools-100-i-a-all-all-all-service-networking]
module.tf_private_pool.module.peered_network[0].module.subnets.google_compute_subnetwork.subnetwork["northamerica-northeast1/sb-b-cbpools-northamerica-northeast1"]: Creation complete after 24s [id=projects/prj-b-cicd-khce/regions/northamerica-northeast1/subnetworks/sb-b-cbpools-northamerica-northeast1]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [20s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [30s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [40s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [1m10s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [1m20s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [1m30s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [1m40s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [1m50s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Still creating... [2m0s elapsed]
module.tf_private_pool.google_service_networking_connection.worker_pool_conn[0]: Creation complete after 2m2s [id=projects%2Fprj-b-cicd-khce%2Fglobal%2Fnetworks%2Fvpc-b-cbpools:servicenetworking.googleapis.com]
module.tf_private_pool.google_compute_network_peering_routes_config.peering_routes[0]: Creating...
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Creating...
module.tf_private_pool.google_compute_network_peering_routes_config.peering_routes[0]: Still creating... [10s elapsed]
module.tf_private_pool.google_compute_network_peering_routes_config.peering_routes[0]: Creation complete after 11s [id=projects/prj-b-cicd-khce/global/networks/vpc-b-cbpools/networkPeerings/servicenetworking-googleapis-com]
╷
│ Error: Error creating WorkerPool: googleapi: Error 403: Cloud Build API has not been used in project tef-oldev before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=tef-oldev then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
│ Details:
│ [
│ {
│ "@type": "type.googleapis.com/google.rpc.Help",
│ "links": [
│ {
│ "description": "Google developers console API activation",
│ "url": "https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=tef-oldev"
│ }
│ ]
│ },
│ {
│ "@type": "type.googleapis.com/google.rpc.ErrorInfo",
│ "domain": "googleapis.com",
│ "metadata": {
│ "consumer": "projects/tef-oldev",
│ "service": "cloudbuild.googleapis.com"
│ },
│ "reason": "SERVICE_DISABLED"
│ }
│ ]
│
│ with module.tf_private_pool.google_cloudbuild_worker_pool.private_pool,
│ on modules/cb-private-pool/main.tf line 30, in resource "google_cloudbuild_worker_pool" "private_pool":
│ 30: resource "google_cloudbuild_worker_pool" "private_pool" {
│
╵
╷
│ Error: Error waiting to create Repository: Error waiting for Creating Repository: Error code 3, message: Request contains an invalid argument.
│
│ with module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo,
│ on .terraform/modules/tf_cloud_builder/modules/tf_cloudbuild_builder/gar.tf line 21, in resource "google_artifact_registry_repository" "tf-image-repo":
│ 21: resource "google_artifact_registry_repository" "tf-image-repo" {
│
╵
1759
In past deployments - missed adding cb service enablement
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ gcloud services enable cloudbuild.googleapis.com
Operation "operations/acf.p2-959116870819-7975f6d3-e973-4039-89fb-27b0ec3b462f" finished successfully.
Plan: 79 to add, 0 to change, 0 to destroy.
1802
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Creating...
module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo: Creating...
module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo: Still creating... [10s elapsed]
module.tf_cloud_builder.google_artifact_registry_repository.tf-image-repo: Creation complete after 11s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners]
module.tf_cloud_builder.google_artifact_registry_repository_iam_member.push_images: Creating...
module.tf_cloud_builder.google_artifact_registry_repository_iam_member.workflow_list: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["net"]: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["env"]: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["proj"]: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["bootstrap"]: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["org"]: Creating...
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["net"]: Creation complete after 7s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_cloud_builder.google_artifact_registry_repository_iam_member.push_images: Creation complete after 10s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.writer/serviceAccount:tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
module.tf_cloud_builder.google_artifact_registry_repository_iam_member.workflow_list: Still creating... [10s elapsed]
module.tf_cloud_builder.google_artifact_registry_repository_iam_member.workflow_list: Creation complete after 10s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:terraform-runner-workflow-sa@prj-b-cicd-khce.iam.gserviceaccount.com]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["env"]: Still creating... [10s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["org"]: Still creating... [10s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["proj"]: Still creating... [10s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["bootstrap"]: Still creating... [10s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["env"]: Still creating... [20s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["bootstrap"]: Still creating... [20s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["proj"]: Still creating... [20s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["org"]: Still creating... [20s elapsed]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["org"]: Creation complete after 26s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["env"]: Creation complete after 26s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["proj"]: Creation complete after 26s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
google_artifact_registry_repository_iam_member.terraform_sa_artifact_registry_reader["bootstrap"]: Creation complete after 27s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners/roles/artifactregistry.reader/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
╷
│ Error: Error creating WorkerPool: googleapi: Error 403: Cloud Build API has not been used in project tef-oldev before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=tef-oldev then retry. If you enabled this API recently, wait a few minutes for the action to propagate to our systems and retry.
│ Details:
│ [
│ {
│ "@type": "type.googleapis.com/google.rpc.Help",
│ "links": [
│ {
│ "description": "Google developers console API activation",
│ "url": "https://console.developers.google.com/apis/api/cloudbuild.googleapis.com/overview?project=tef-oldev"
│ }
│ ]
│ },
│ {
│ "@type": "type.googleapis.com/google.rpc.ErrorInfo",
│ "domain": "googleapis.com",
│ "metadata": {
│ "consumer": "projects/tef-oldev",
│ "service": "cloudbuild.googleapis.com"
│ },
│ "reason": "SERVICE_DISABLED"
│ }
│ ]
│
│ with module.tf_private_pool.google_cloudbuild_worker_pool.private_pool,
│ on modules/cb-private-pool/main.tf line 30, in resource "google_cloudbuild_worker_pool" "private_pool":
│ 30: resource "google_cloudbuild_worker_pool" "private_pool" {
│
╵
Plan: 71 to add, 0 to change, 0 to destroy.
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Creating...
╷
│ Error: Error creating WorkerPool: Resource already exists - apply blocked by lifecycle params: &cloudbuild.WorkerPool{Name:(*string)(0xc000fcbc50), DisplayName:(*string)(0xc000fcbcd0), Uid:(*string)(0xc00174dba0), Annotations:map[string]string{}, CreateTime:(*string)(0xc00174dbb0), UpdateTime:(*string)(0xc00174dbc0), DeleteTime:(*string)(nil), State:(*cloudbuild.WorkerPoolStateEnum)(0xc00174dbd0), PrivatePoolV1Config:(*cloudbuild.WorkerPoolPrivatePoolV1Config)(0xc001ca6f30), Etag:(*string)(0xc00174dc70), WorkerConfig:(*cloudbuild.WorkerPoolWorkerConfig)(nil), NetworkConfig:(*cloudbuild.WorkerPoolNetworkConfig)(nil), Project:(*string)(0xc000fcbec0), Location:(*string)(0xc000fcbbd0)}.
│
│ with module.tf_private_pool.google_cloudbuild_worker_pool.private_pool,
│ on modules/cb-private-pool/main.tf line 30, in resource "google_cloudbuild_worker_pool" "private_pool":
│ 30: resource "google_cloudbuild_worker_pool" "private_pool" {
│
╵
1810
private-pool-rtbh northamerica-northeast1 e2-medium 100 GB vpc-b-cbpools
Plan: 71 to add, 0 to change, 0 to destroy.
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform apply bootstrap.tfplan
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Creating...
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Still creating... [10s elapsed]
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Still creating... [20s elapsed]
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Still creating... [30s elapsed]
1:30
module.tf_private_pool.google_cloudbuild_worker_pool.private_pool: Creation complete after 1m33s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/workerPools/private-pool-rtbh]
module.tf_cloud_builder.google_cloudbuild_trigger.build_trigger: Creating...
module.tf_cloud_builder.google_cloudbuild_trigger.build_trigger: Creation complete after 0s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/aee350d1-bc42-4542-bf2e-62a554925fd0]
time_sleep.cloud_builder: Creating...
module.tf_workspace["env"].data.google_project.cloudbuild_project[0]: Reading...
module.tf_workspace["org"].data.google_project.cloudbuild_project[0]: Reading...
module.tf_workspace["bootstrap"].data.google_project.cloudbuild_project[0]: Reading...
module.tf_workspace["proj"].data.google_project.cloudbuild_project[0]: Reading...
module.tf_workspace["net"].data.google_project.cloudbuild_project[0]: Reading...
module.tf_workspace["proj"].google_storage_bucket_iam_member.state_admin: Creating...
module.tf_workspace["net"].google_storage_bucket_iam_member.state_admin: Creating...
module.tf_workspace["org"].google_storage_bucket_iam_member.state_admin: Creating...
module.tf_workspace["env"].google_storage_bucket_iam_member.state_admin: Creating...
module.tf_workspace["env"].data.google_project.cloudbuild_project[0]: Read complete after 1s [id=projects/prj-b-cicd-khce]
module.tf_workspace["org"].data.google_project.cloudbuild_project[0]: Read complete after 1s [id=projects/prj-b-cicd-khce]
module.tf_workspace["net"].data.google_project.cloudbuild_project[0]: Read complete after 1s [id=projects/prj-b-cicd-khce]
module.tf_workspace["bootstrap"].data.google_project.cloudbuild_project[0]: Read complete after 1s [id=projects/prj-b-cicd-khce]
module.tf_workspace["proj"].data.google_project.cloudbuild_project[0]: Read complete after 1s [id=projects/prj-b-cicd-khce]
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creating...
module.tf_workspace["org"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creating...
module.tf_workspace["env"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creating...
module.tf_workspace["org"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creating...
module.tf_workspace["env"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creating...
module.tf_workspace["proj"].google_storage_bucket_iam_member.state_admin: Creation complete after 5s [id=b/bkt-prj-b-seed-7766-gcp-projects-tfstate/roles/storage.admin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creating...
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["env"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_project_iam_member.cb_sa_logging: Creating...
module.tf_workspace["org"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_project_iam_member.cb_sa_logging: Creating...
module.tf_workspace["net"].google_project_iam_member.cb_sa_logging: Creating...
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creating...
module.tf_workspace["org"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creation complete after 8s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["env"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creation complete after 8s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_sourcerepo_repository_iam_member.member[0]: Creating...
module.tf_workspace["env"].google_project_iam_member.cb_sa_logging: Creating...
time_sleep.cloud_builder: Still creating... [10s elapsed]
module.tf_workspace["net"].google_storage_bucket_iam_member.state_admin: Still creating... [10s elapsed]
module.tf_workspace["org"].google_storage_bucket_iam_member.state_admin: Still creating... [10s elapsed]
module.tf_workspace["env"].google_storage_bucket_iam_member.state_admin: Still creating... [10s elapsed]
module.tf_workspace["env"].google_storage_bucket_iam_member.state_admin: Creation complete after 13s [id=b/bkt-prj-b-seed-tfstate-d48a/roles/storage.admin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_project_iam_member.cb_sa_logging: Creating...
module.tf_workspace["net"].google_storage_bucket_iam_member.state_admin: Creation complete after 13s [id=b/bkt-prj-b-seed-tfstate-d48a/roles/storage.admin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.state_admin: Creating...
module.tf_workspace["proj"].google_project_iam_member.cb_sa_logging: Creation complete after 8s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_storage_bucket_iam_member.state_admin: Creation complete after 13s [id=b/bkt-prj-b-seed-tfstate-d48a/roles/storage.admin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_sourcerepo_repository_iam_member.member[0]: Creating...
module.tf_workspace["org"].google_sourcerepo_repository_iam_member.member[0]: Creating...
module.tf_workspace["env"].google_sourcerepo_repository_iam_member.member[0]: Creating...
module.tf_workspace["bootstrap"].google_sourcerepo_repository_iam_member.member[0]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/gcp-bootstrap/roles/viewer/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creating...
module.tf_workspace["org"].google_project_iam_member.cb_sa_logging: Still creating... [10s elapsed]
module.tf_workspace["net"].google_project_iam_member.cb_sa_logging: Still creating... [10s elapsed]
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.state_admin: Creation complete after 4s [id=b/bkt-prj-b-seed-tfstate-d48a/roles/storage.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["env"].google_sourcerepo_repository_iam_member.member[0]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/gcp-environments/roles/viewer/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creating...
module.tf_workspace["proj"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_sourcerepo_repository_iam_member.member[0]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/gcp-networks/roles/viewer/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_sourcerepo_repository_iam_member.member[0]: Creation complete after 4s [id=projects/prj-b-cicd-khce/repos/gcp-org/roles/viewer/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_project_iam_member.cb_sa_logging: Creation complete after 12s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_sourcerepo_repository_iam_member.member[0]: Creating...
module.tf_workspace["net"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creating...
module.tf_workspace["net"].google_project_iam_member.cb_sa_logging: Creation complete after 13s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_project_iam_member.pool_user[0]: Creating...
module.tf_workspace["env"].google_project_iam_member.pool_user[0]: Creating...
module.tf_workspace["org"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creating...
module.tf_workspace["env"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creating...
module.tf_workspace["env"].google_project_iam_member.cb_sa_logging: Still creating... [10s elapsed]
time_sleep.cloud_builder: Still creating... [20s elapsed]
module.tf_workspace["env"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:service-1011704167489@gcp-sa-cloudbuild.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_sourcerepo_repository_iam_member.member[0]: Creation complete after 5s [id=projects/prj-b-cicd-khce/repos/gcp-projects/roles/viewer/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_project_iam_member.pool_user[0]: Creating...
module.tf_workspace["net"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creating...
module.tf_workspace["env"].google_project_iam_member.cb_sa_logging: Creation complete after 13s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:service-1011704167489@gcp-sa-cloudbuild.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_project_iam_member.pool_user[0]: Creating...
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creating...
module.tf_workspace["bootstrap"].google_project_iam_member.cb_sa_logging: Still creating... [10s elapsed]
module.tf_workspace["net"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountUser"]: Creation complete after 8s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountUser/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_service_account_iam_member.cb_sa_self["roles/iam.serviceAccountTokenCreator"]: Creation complete after 8s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creating...
module.tf_workspace["proj"].google_project_iam_member.pool_user[0]: Creating...
module.tf_workspace["bootstrap"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:service-1011704167489@gcp-sa-cloudbuild.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_project_iam_member.cb_sa_logging: Creation complete after 13s [id=prj-b-cicd-khce/roles/logging.logWriter/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].module.log_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["bootstrap"].module.log_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["proj"].module.log_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-projects-build-logs]
module.tf_workspace["bootstrap"].module.log_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-bootstrap-build-logs]
module.tf_workspace["net"].module.log_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["env"].module.log_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["org"].google_project_iam_member.pool_user[0]: Still creating... [10s elapsed]
module.tf_workspace["env"].google_project_iam_member.pool_user[0]: Still creating... [10s elapsed]
module.tf_workspace["env"].module.log_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-environments-build-logs]
module.tf_workspace["net"].module.log_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-networks-build-logs]
module.tf_workspace["org"].module.log_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["env"].module.artifacts_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["proj"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creation complete after 4s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:service-1011704167489@gcp-sa-cloudbuild.iam.gserviceaccount.com]
module.tf_workspace["net"].google_service_account_iam_member.cb_service_agent_impersonate[0]: Creation complete after 7s [id=projects/prj-b-seed-7766/serviceAccounts/sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com/roles/iam.serviceAccountTokenCreator/serviceAccount:service-1011704167489@gcp-sa-cloudbuild.iam.gserviceaccount.com]
module.tf_workspace["org"].module.artifacts_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["bootstrap"].module.artifacts_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["org"].module.log_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-org-build-logs]
module.tf_workspace["net"].module.artifacts_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["env"].module.artifacts_bucket.google_storage_bucket.bucket: Creation complete after 2s [id=bkt-prj-b-cicd-khce-gcp-environments-build-artifacts]
module.tf_workspace["proj"].module.artifacts_bucket.google_storage_bucket.bucket: Creating...
module.tf_workspace["bootstrap"].module.artifacts_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-bootstrap-build-artifacts]
module.tf_workspace["env"].google_storage_bucket_iam_member.log_admin: Creating...
module.tf_workspace["net"].module.artifacts_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-networks-build-artifacts]
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.log_admin: Creating...
module.tf_workspace["org"].module.artifacts_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-org-build-artifacts]
module.tf_workspace["net"].google_storage_bucket_iam_member.log_admin: Creating...
module.tf_workspace["env"].google_project_iam_member.pool_user[0]: Creation complete after 12s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolUser/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
module.tf_workspace["proj"].google_storage_bucket_iam_member.log_admin: Creating...
module.tf_workspace["org"].google_project_iam_member.pool_user[0]: Creation complete after 12s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolUser/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
time_sleep.cloud_builder: Still creating... [30s elapsed]
time_sleep.cloud_builder: Creation complete after 31s [id=2024-05-04T22:18:29Z]
module.tf_workspace["org"].google_storage_bucket_iam_member.log_admin: Creating...
module.build_terraform_image.null_resource.module_depends_on[0]: Creating...
module.build_terraform_image.null_resource.module_depends_on[0]: Creation complete after 0s [id=360307412708142270]
module.tf_workspace["proj"].module.artifacts_bucket.google_storage_bucket.bucket: Creation complete after 1s [id=bkt-prj-b-cicd-khce-gcp-projects-build-artifacts]
module.build_terraform_image.null_resource.run_destroy_command[0]: Creating...
module.build_terraform_image.null_resource.run_command[0]: Creating...
module.build_terraform_image.null_resource.run_destroy_command[0]: Creation complete after 0s [id=6465925445161128346]
module.build_terraform_image.null_resource.run_command[0]: Provisioning with 'local-exec'...
module.build_terraform_image.null_resource.run_command[0] (local-exec): Executing: ["/bin/sh" "-c" "PATH=/google-cloud-sdk/bin:$PATH\ngcloud beta builds triggers run aee350d1-bc42-4542-bf2e-62a554925fd0 --branch main --region northamerica-northeast1 --project prj-b-cicd-khce\n"]
module.tf_workspace["net"].google_storage_bucket_iam_member.artifacts_admin: Creating...
module.tf_workspace["net"].google_project_iam_member.pool_user[0]: Still creating... [10s elapsed]
module.tf_workspace["bootstrap"].google_project_iam_member.pool_user[0]: Still creating... [10s elapsed]
module.build_terraform_image.null_resource.run_command[0] (local-exec): metadata:
module.build_terraform_image.null_resource.run_command[0] (local-exec): '@type': type.googleapis.com/google.devtools.cloudbuild.v1.BuildOperationMetadata
module.build_terraform_image.null_resource.run_command[0] (local-exec): build:
module.build_terraform_image.null_resource.run_command[0] (local-exec): artifacts:
module.build_terraform_image.null_resource.run_command[0] (local-exec): images:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3
module.build_terraform_image.null_resource.run_command[0] (local-exec): buildTriggerId: aee350d1-bc42-4542-bf2e-62a554925fd0
module.build_terraform_image.null_resource.run_command[0] (local-exec): createTime: '2024-05-04T22:18:31.308650Z'
module.build_terraform_image.null_resource.run_command[0] (local-exec): id: d4ed61f2-a6c9-40a5-93ef-30d9fc565d8d
module.build_terraform_image.null_resource.run_command[0] (local-exec): images:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1
module.build_terraform_image.null_resource.run_command[0] (local-exec): - northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3
module.build_terraform_image.null_resource.run_command[0] (local-exec): logUrl: https://console.cloud.google.com/cloud-build/builds;region=northamerica-northeast1/d4ed61f2-a6c9-40a5-93ef-30d9fc565d8d?project=1011704167489
module.build_terraform_image.null_resource.run_command[0] (local-exec): logsBucket: gs://bkt-prj-b-cicd-khce-tf-cloudbuilder-build-logs
module.build_terraform_image.null_resource.run_command[0] (local-exec): name: projects/1011704167489/locations/northamerica-northeast1/builds/d4ed61f2-a6c9-40a5-93ef-30d9fc565d8d
module.build_terraform_image.null_resource.run_command[0] (local-exec): options:
module.build_terraform_image.null_resource.run_command[0] (local-exec): dynamicSubstitutions: true
module.build_terraform_image.null_resource.run_command[0] (local-exec): logging: LEGACY
module.build_terraform_image.null_resource.run_command[0] (local-exec): pool:
module.build_terraform_image.null_resource.run_command[0] (local-exec): name: projects/prj-b-cicd-khce/locations/northamerica-northeast1/workerPools/private-pool-rtbh
module.build_terraform_image.null_resource.run_command[0] (local-exec): substitutionOption: ALLOW_LOOSE
module.build_terraform_image.null_resource.run_command[0] (local-exec): projectId: prj-b-cicd-khce
module.build_terraform_image.null_resource.run_command[0] (local-exec): queueTtl: 3600s
module.build_terraform_image.null_resource.run_command[0] (local-exec): serviceAccount: projects/prj-b-cicd-khce/serviceAccounts/tf-cb-builder-sa@prj-b-cicd-khce.iam.gserviceaccount.com
module.build_terraform_image.null_resource.run_command[0] (local-exec): source:
module.build_terraform_image.null_resource.run_command[0] (local-exec): repoSource:
module.build_terraform_image.null_resource.run_command[0] (local-exec): commitSha: 1be6671cb5c732b4cd020db4c504f9a8e9c149d0
module.build_terraform_image.null_resource.run_command[0] (local-exec): projectId: prj-b-cicd-khce
module.build_terraform_image.null_resource.run_command[0] (local-exec): repoName: tf-cloudbuilder
module.build_terraform_image.null_resource.run_command[0] (local-exec): sourceProvenance:
module.build_terraform_image.null_resource.run_command[0] (local-exec): resolvedRepoSource:
module.build_terraform_image.null_resource.run_command[0] (local-exec): commitSha: 1be6671cb5c732b4cd020db4c504f9a8e9c149d0
module.build_terraform_image.null_resource.run_command[0] (local-exec): projectId: prj-b-cicd-khce
module.build_terraform_image.null_resource.run_command[0] (local-exec): repoName: tf-cloudbuilder
module.build_terraform_image.null_resource.run_command[0] (local-exec): status: QUEUED
module.build_terraform_image.null_resource.run_command[0] (local-exec): steps:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - args:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - build
module.build_terraform_image.null_resource.run_command[0] (local-exec): - --tag=northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): - --tag=northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1
module.build_terraform_image.null_resource.run_command[0] (local-exec): - --tag=northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3
module.build_terraform_image.null_resource.run_command[0] (local-exec): - --build-arg=TERRAFORM_VERSION=1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): - .
module.build_terraform_image.null_resource.run_command[0] (local-exec): name: gcr.io/cloud-builders/docker
module.build_terraform_image.null_resource.run_command[0] (local-exec): - args:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - version
module.build_terraform_image.null_resource.run_command[0] (local-exec): name: northamerica-northeast1-docker.pkg.dev/prj-b-cicd-khce/tf-runners/terraform:v1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): substitutions:
module.build_terraform_image.null_resource.run_command[0] (local-exec): BRANCH_NAME: main
module.build_terraform_image.null_resource.run_command[0] (local-exec): COMMIT_SHA: 1be6671cb5c732b4cd020db4c504f9a8e9c149d0
module.build_terraform_image.null_resource.run_command[0] (local-exec): REF_NAME: main
module.build_terraform_image.null_resource.run_command[0] (local-exec): REPO_NAME: tf-cloudbuilder
module.build_terraform_image.null_resource.run_command[0] (local-exec): REVISION_ID: 1be6671cb5c732b4cd020db4c504f9a8e9c149d0
module.build_terraform_image.null_resource.run_command[0] (local-exec): SHORT_SHA: 1be6671
module.build_terraform_image.null_resource.run_command[0] (local-exec): TRIGGER_BUILD_CONFIG_PATH: ''
module.build_terraform_image.null_resource.run_command[0] (local-exec): TRIGGER_NAME: tf-cloud-builder-build
module.build_terraform_image.null_resource.run_command[0] (local-exec): _TERRAFORM_FULL_VERSION: 1.3.0
module.build_terraform_image.null_resource.run_command[0] (local-exec): _TERRAFORM_MAJOR_VERSION: '1'
module.build_terraform_image.null_resource.run_command[0] (local-exec): _TERRAFORM_MINOR_VERSION: '1.3'
module.build_terraform_image.null_resource.run_command[0] (local-exec): tags:
module.build_terraform_image.null_resource.run_command[0] (local-exec): - trigger-aee350d1-bc42-4542-bf2e-62a554925fd0
module.build_terraform_image.null_resource.run_command[0] (local-exec): timeout: 1200s
module.build_terraform_image.null_resource.run_command[0] (local-exec): name: operations/build/prj-b-cicd-khce/ZDRlZDYxZjItYTZjOS00MGE1LTkzZWYtMzBkOWZjNTY1ZDhk
module.build_terraform_image.null_resource.run_command[0]: Creation complete after 2s [id=8305770739688778764]
module.tf_workspace["env"].google_storage_bucket_iam_member.artifacts_admin: Creating...
module.tf_workspace["env"].google_storage_bucket_iam_member.log_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-environments-build-logs/roles/storage.admin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_storage_bucket_iam_member.artifacts_admin: Creating...
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.log_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-bootstrap-build-logs/roles/storage.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_storage_bucket_iam_member.log_admin: Creation complete after 5s [id=b/bkt-prj-b-cicd-khce-gcp-projects-build-logs/roles/storage.admin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_storage_bucket_iam_member.artifacts_admin: Creating...
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.artifacts_admin: Creating...
module.tf_workspace["bootstrap"].google_project_iam_member.pool_user[0]: Creation complete after 13s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolUser/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
module.tf_workspace["org"].google_storage_bucket_iam_member.log_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-org-build-logs/roles/storage.admin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_storage_bucket_iam_member.log_admin: Creation complete after 5s [id=b/bkt-prj-b-cicd-khce-gcp-networks-build-logs/roles/storage.admin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_project_iam_member.pool_user[0]: Still creating... [10s elapsed]
module.tf_workspace["proj"].google_project_iam_member.pool_user[0]: Creation complete after 10s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolUser/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
module.tf_workspace["net"].google_project_iam_member.pool_user[0]: Creation complete after 13s [id=prj-b-cicd-khce/roles/cloudbuild.workerPoolUser/serviceAccount:1011704167489@cloudbuild.gserviceaccount.com]
module.tf_workspace["net"].google_storage_bucket_iam_member.artifacts_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-networks-build-artifacts/roles/storage.admin/serviceAccount:sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["net"].google_cloudbuild_trigger.triggers["plan"]: Creating...
module.tf_workspace["proj"].google_cloudbuild_trigger.triggers["apply"]: Creating...
module.tf_workspace["proj"].google_cloudbuild_trigger.triggers["plan"]: Creating...
module.tf_workspace["org"].google_cloudbuild_trigger.triggers["plan"]: Creating...
module.tf_workspace["bootstrap"].google_cloudbuild_trigger.triggers["apply"]: Creating...
module.tf_workspace["bootstrap"].google_cloudbuild_trigger.triggers["plan"]: Creating...
module.tf_workspace["bootstrap"].google_cloudbuild_trigger.triggers["plan"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/2824c7a4-670b-48c3-a610-e17990a2f0cb]
module.tf_workspace["proj"].google_cloudbuild_trigger.triggers["plan"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/64bf72f0-786b-42fd-bff4-22cc698b4ec3]
module.tf_workspace["proj"].google_cloudbuild_trigger.triggers["apply"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/4ebb0852-d633-4203-ad98-b2ef86c2fd97]
module.tf_workspace["net"].google_cloudbuild_trigger.triggers["plan"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/a1f20675-b6f7-494e-bfaf-1770788f4fc0]
module.tf_workspace["env"].google_cloudbuild_trigger.triggers["plan"]: Creating...
module.tf_workspace["org"].google_cloudbuild_trigger.triggers["plan"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/02cbbc49-1ee8-41df-bc5d-766d4c7e0299]
module.tf_workspace["bootstrap"].google_cloudbuild_trigger.triggers["apply"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/291792f7-155c-43cf-a263-0096c6313941]
module.tf_workspace["net"].google_cloudbuild_trigger.triggers["apply"]: Creating...
module.tf_workspace["env"].google_cloudbuild_trigger.triggers["apply"]: Creating...
module.tf_workspace["org"].google_cloudbuild_trigger.triggers["apply"]: Creating...
module.tf_workspace["env"].google_cloudbuild_trigger.triggers["plan"]: Creation complete after 1s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/7c89a555-65da-4d0c-baaa-7163ee2f5ea1]
module.tf_workspace["net"].google_cloudbuild_trigger.triggers["apply"]: Creation complete after 0s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/6890d4a4-1291-4651-b171-c609d551437e]
module.tf_workspace["org"].google_cloudbuild_trigger.triggers["apply"]: Creation complete after 0s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/aaac5cc9-cb72-4492-b673-efd0d609e496]
module.tf_workspace["env"].google_cloudbuild_trigger.triggers["apply"]: Creation complete after 0s [id=projects/prj-b-cicd-khce/locations/northamerica-northeast1/triggers/c0f4c403-0344-4726-a79e-d0d145e5123f]
module.tf_workspace["env"].google_storage_bucket_iam_member.artifacts_admin: Creation complete after 5s [id=b/bkt-prj-b-cicd-khce-gcp-environments-build-artifacts/roles/storage.admin/serviceAccount:sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["proj"].google_storage_bucket_iam_member.artifacts_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-projects-build-artifacts/roles/storage.admin/serviceAccount:sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["bootstrap"].google_storage_bucket_iam_member.artifacts_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-bootstrap-build-artifacts/roles/storage.admin/serviceAccount:sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com]
module.tf_workspace["org"].google_storage_bucket_iam_member.artifacts_admin: Creation complete after 4s [id=b/bkt-prj-b-cicd-khce-gcp-org-build-artifacts/roles/storage.admin/serviceAccount:sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com]
Apply complete! Resources: 71 added, 0 changed, 0 destroyed.
Outputs:
bootstrap_step_terraform_service_account_email = "sa-terraform-bootstrap@prj-b-seed-7766.iam.gserviceaccount.com"
cloud_build_peered_network_id = "projects/prj-b-cicd-khce/global/networks/vpc-b-cbpools"
cloud_build_private_worker_pool_id = "projects/prj-b-cicd-khce/locations/northamerica-northeast1/workerPools/private-pool-rtbh"
cloud_build_worker_peered_ip_range = "192.168.0.0/24"
cloud_build_worker_range_id = "projects/prj-b-cicd-khce/global/addresses/ga-b-cbpools-worker-pool-range"
cloud_builder_artifact_repo = "projects/prj-b-cicd-khce/locations/northamerica-northeast1/repositories/tf-runners"
cloudbuild_project_id = "prj-b-cicd-khce"
common_config = {
"billing_account" = "019283-6F1AB5-7AD576"
"bootstrap_folder_name" = "folders/939569880380"
"default_region" = "northamerica-northeast1"
"folder_prefix" = "fldr"
"org_id" = "583675367868"
"parent_folder" = "1071946810002"
"parent_id" = "folders/1071946810002"
"project_prefix" = "prj"
}
csr_repos = {
"gcp-bootstrap" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-bootstrap"
"name" = "gcp-bootstrap"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-bootstrap"
}
"gcp-environments" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-environments"
"name" = "gcp-environments"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-environments"
}
"gcp-networks" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-networks"
"name" = "gcp-networks"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-networks"
}
"gcp-org" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-org"
"name" = "gcp-org"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-org"
}
"gcp-policies" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-policies"
"name" = "gcp-policies"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-policies"
}
"gcp-projects" = {
"id" = "projects/prj-b-cicd-khce/repos/gcp-projects"
"name" = "gcp-projects"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-projects"
}
"tf-cloudbuilder" = {
"id" = "projects/prj-b-cicd-khce/repos/tf-cloudbuilder"
"name" = "tf-cloudbuilder"
"project" = "prj-b-cicd-khce"
"url" = "https://source.developers.google.com/p/prj-b-cicd-khce/r/tf-cloudbuilder"
}
}
environment_step_terraform_service_account_email = "sa-terraform-env@prj-b-seed-7766.iam.gserviceaccount.com"
gcs_bucket_cloudbuild_artifacts = {
"bootstrap" = "bkt-prj-b-cicd-khce-gcp-bootstrap-build-artifacts"
"env" = "bkt-prj-b-cicd-khce-gcp-environments-build-artifacts"
"net" = "bkt-prj-b-cicd-khce-gcp-networks-build-artifacts"
"org" = "bkt-prj-b-cicd-khce-gcp-org-build-artifacts"
"proj" = "bkt-prj-b-cicd-khce-gcp-projects-build-artifacts"
}
gcs_bucket_cloudbuild_logs = {
"bootstrap" = "bkt-prj-b-cicd-khce-gcp-bootstrap-build-logs"
"env" = "bkt-prj-b-cicd-khce-gcp-environments-build-logs"
"net" = "bkt-prj-b-cicd-khce-gcp-networks-build-logs"
"org" = "bkt-prj-b-cicd-khce-gcp-org-build-logs"
"proj" = "bkt-prj-b-cicd-khce-gcp-projects-build-logs"
}
gcs_bucket_tfstate = "bkt-prj-b-seed-tfstate-d48a"
networks_step_terraform_service_account_email = "sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com"
optional_groups = tomap({
"gcp_global_secrets_admin" = "gcp_global_secrets_admin@obrienlabs.dev"
"gcp_kms_admin" = "gcp_kms_admin@obrienlabs.dev"
"gcp_network_viewer" = "gcp_network_viewer@obrienlabs.dev"
"gcp_scc_admin" = "gcp_scc_admin@obrienlabs.dev"
"gcp_security_reviewer" = "gcp_security_reviewer@obrienlabs.dev"
})
organization_step_terraform_service_account_email = "sa-terraform-org@prj-b-seed-7766.iam.gserviceaccount.com"
projects_gcs_bucket_tfstate = "bkt-prj-b-seed-7766-gcp-projects-tfstate"
projects_step_terraform_service_account_email = "sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com"
required_groups = tomap({
"audit_data_users" = "gcp-audit-data@obrienlabs.dev"
"billing_data_users" = "gcp-billing-data@obrienlabs.dev"
"group_billing_admins" = "gcp-billing-admins@obrienlabs.dev"
"group_org_admins" = "gcp-organization-admins@obrienlabs.dev"
"monitoring_workspace_users" = "gcp-monitoring-workspace@obrienlabs.dev"
})
seed_project_id = "prj-b-seed-7766"
1819 50 min overall with 23 min terraform run time
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export network_step_sa=$(terraform output -raw networks_step_terraform_service_account_email)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export projects_step_sa=$(terraform output -raw projects_step_terraform_service_account_email)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export projects_gcs_bucket_tfstate=$(terraform output -raw projects_gcs_bucket_tfstate)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "network step service account = ${network_step_sa}"
network step service account = sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "projects step service account = ${projects_step_sa}"
projects step service account = sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "projects gcs bucket tfstate = ${projects_gcs_bucket_tfstate}"
projects gcs bucket tfstate = bkt-prj-b-seed-7766-gcp-projects-tfstate
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "network step service account = ${network_step_sa}"
network step service account = sa-terraform-net@prj-b-seed-7766.iam.gserviceaccount.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "projects step service account = ${projects_step_sa}"
projects step service account = sa-terraform-proj@prj-b-seed-7766.iam.gserviceaccount.com
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "projects gcs bucket tfstate = ${projects_gcs_bucket_tfstate}"
projects gcs bucket tfstate = bkt-prj-b-seed-7766-gcp-projects-tfstate
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export cloudbuild_project_id=$(terraform output -raw cloudbuild_project_id)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "cloud build project ID = ${cloudbuild_project_id}"
cloud build project ID = prj-b-cicd-khce
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export backend_bucket=$(terraform output -raw gcs_bucket_tfstate)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "backend_bucket = ${backend_bucket}"
backend_bucket = bkt-prj-b-seed-tfstate-d48a
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ export backend_bucket_projects=$(terraform output -raw projects_gcs_bucket_tfstate)
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ echo "backend_bucket_projects = ${backend_bucket_projects}
> cp backend.tf.example backend.tf
> ^C
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ cp backend.tf.example backend.tf
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ cd ..
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ for i in `find . -name 'backend.tf'`; do sed -i'' -e "s/UPDATE_ME/${backend_bucket}/" $i; done
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ for i in `find . -name 'backend.tf'`; do sed -i'' -e "s/UPDATE_PROJECTS_BACKEND/${backend_bucket_projects}/" $i; done
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding (tef-oldev)$ cd 0-bootstrap/
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ terraform init
Initializing modules...
Initializing the backend...
Do you want to copy existing state to the new backend?
Pre-existing state was found while migrating the previous "local" backend to the
newly configured "gcs" backend. No existing state was found in the newly
configured "gcs" backend. Do you want to copy this state to the new "gcs"
backend? Enter "yes" to copy and "no" to start with an empty state.
Enter a value: yes
Successfully configured the backend "gcs"! Terraform will automatically
use this backend unless the backend configuration changes.
Initializing provider plugins...
- Reusing previous version of hashicorp/null from the dependency lock file
- Reusing previous version of hashicorp/google from the dependency lock file
- Reusing previous version of hashicorp/random from the dependency lock file
- Reusing previous version of hashicorp/time from the dependency lock file
- Reusing previous version of hashicorp/google-beta from the dependency lock file
- Reusing previous version of hashicorp/external from the dependency lock file
- Using previously-installed hashicorp/null v3.2.2
- Using previously-installed hashicorp/google v5.27.0
- Using previously-installed hashicorp/random v3.6.1
- Using previously-installed hashicorp/time v0.11.1
- Using previously-installed hashicorp/google-beta v5.27.0
- Using previously-installed hashicorp/external v2.3.3
Terraform has been successfully initialized!
You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.
If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.
terraform plan
No changes. Your infrastructure matches the configuration.
Terraform has compared your real infrastructure against your configuration and found no differences, so no changes are needed.
terraform {
backend "gcs" {
bucket = "bkt-prj-b-seed-tfstate-d48a"
prefix = "terraform/bootstrap/state"
}
michael@cloudshell:~/tef-oldev/github/pbmm-on-gcp-onboarding/0-bootstrap (tef-oldev)$ cd ../..
michael@cloudshell:~/tef-oldev/github (tef-oldev)$ gcloud source repos clone gcp-policies --project=${cloudbuild_project_id}
Cloning into '/home/michael/tef-oldev/github/gcp-policies'...
warning: You appear to have cloned an empty repository.
Project [prj-b-cicd-khce] repository [gcp-policies] was cloned to [/home/michael/tef-oldev/github/gcp-policies].
michael@cloudshell:~/tef-oldev/github (tef-oldev)$ ls
gcp-policies pbmm-on-gcp-onboarding
michael@cloudshell:~/tef-oldev/github (tef-oldev)$ cd gcp-policies
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ git checkout -b main
Switched to a new branch 'main'
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ cp -RT ../pbmm-on-gcp-onboarding/policy-library/ .
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ git add .
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ git commit -m 'Initialize policy library repo'
[main (root-commit) bd4f69d] Initialize policy library repo
112 files changed, 9682 insertions(+)
create mode 100644 lib/constraints.rego
create mode 100644 lib/util.rego
create mode 100644 lib/util_test.rego
create mode 100644 policies/constraints/appengine_versions.yaml
create mode 100644 policies/constraints/bigquery_world_readable.yaml
create mode 100644 policies/constraints/dnssec_prevent_rsasha1_ksk.yaml
create mode 100644 policies/constraints/dnssec_prevent_rsasha1_zsk.yaml
create mode 100644 policies/constraints/gke_allow_only_private_cluster.yaml
create mode 100644 policies/constraints/gke_allowed_node_sa_scope.yaml
create mode 100644 policies/constraints/gke_container_optimized_os.yaml
create mode 100644 policies/constraints/gke_dashboard_disable.yaml
create mode 100644 policies/constraints/gke_disable_default_service_account.yaml
create mode 100644 policies/constraints/gke_disable_legacy_endpoints.yaml
create mode 100644 policies/constraints/gke_enable_alias_ip_ranges.yaml
create mode 100644 policies/constraints/gke_legacy_abac.yaml
create mode 100644 policies/constraints/gke_master_authorized_networks_enabled.yaml
create mode 100644 policies/constraints/gke_node_pool_auto_repair.yaml
create mode 100644 policies/constraints/gke_node_pool_auto_upgrade.yaml
create mode 100644 policies/constraints/gke_restrict_client_auth_methods.yaml
create mode 100644 policies/constraints/gke_restrict_pod_traffic.yaml
create mode 100644 policies/constraints/iam_deny_public.yaml
create mode 100644 policies/constraints/network_enable_flow_logs.yaml
create mode 100644 policies/constraints/network_enable_private_google_access.yaml
create mode 100644 policies/constraints/restrict_fw_rules_rdp_world_open.yaml
create mode 100644 policies/constraints/restrict_fw_rules_ssh_world_open.yaml
create mode 100644 policies/constraints/restrict_fw_rules_world_open.yaml
create mode 100644 policies/constraints/serviceusage_allow_basic_apis.yaml
create mode 100644 policies/constraints/sql_public_ip.yaml
create mode 100644 policies/constraints/sql_ssl.yaml
create mode 100644 policies/constraints/storage_bucket_policy_only.yaml
create mode 100644 policies/constraints/storage_denylist_public.yaml
create mode 100644 policies/templates/gcp_allowed_resource_types.yaml
create mode 100644 policies/templates/gcp_always_violates_v1.yaml
create mode 100644 policies/templates/gcp_app_service_versions.yaml
create mode 100644 policies/templates/gcp_appengine_location_v1.yaml
create mode 100644 policies/templates/gcp_bigquery_cmek_encryption_v1.yaml
create mode 100644 policies/templates/gcp_bigquery_dataset_world_readable_v1.yaml
create mode 100644 policies/templates/gcp_bigquery_table_retention_v1.yaml
create mode 100644 policies/templates/gcp_bq_dataset_location_v1.yaml
create mode 100644 policies/templates/gcp_cmek_rotation_v1.yaml
create mode 100644 policies/templates/gcp_cmek_settings_v1.yaml
create mode 100644 policies/templates/gcp_compute_allowed_networks.yaml
create mode 100644 policies/templates/gcp_compute_disk_resource_policies_v1.yaml
create mode 100644 policies/templates/gcp_compute_external_ip_address.yaml
create mode 100644 policies/templates/gcp_compute_ip_forward.yaml
create mode 100644 policies/templates/gcp_compute_zone_v1.yaml
create mode 100644 policies/templates/gcp_dataproc_location_v1.yaml
create mode 100644 policies/templates/gcp_dnssec_prevent_rsasha1_v1.yaml
create mode 100644 policies/templates/gcp_dnssec_v1.yaml
create mode 100644 policies/templates/gcp_enforce_labels_v1.yaml
create mode 100644 policies/templates/gcp_enforce_naming_v1.yaml
create mode 100644 policies/templates/gcp_gke_allowed_node_sa_v1.yaml
create mode 100644 policies/templates/gcp_gke_cluster_location.yaml
create mode 100644 policies/templates/gcp_gke_cluster_version_v1.yaml
create mode 100644 policies/templates/gcp_gke_container_optimized_os.yaml
create mode 100644 policies/templates/gcp_gke_dashboard_v1.yaml
create mode 100644 policies/templates/gcp_gke_disable_default_service_account_v1.yaml
create mode 100644 policies/templates/gcp_gke_disable_legacy_endpoints_v1.yaml
create mode 100644 policies/templates/gcp_gke_enable_alias_ip_ranges.yaml
create mode 100644 policies/templates/gcp_gke_enable_private_endpoint.yaml
create mode 100644 policies/templates/gcp_gke_enable_shielded_nodes_v1.yaml
create mode 100644 policies/templates/gcp_gke_enable_stackdriver_kubernetes_engine_monitoring_v1.yaml
create mode 100644 policies/templates/gcp_gke_enable_stackdriver_logging_v1.yaml
create mode 100644 policies/templates/gcp_gke_enable_stackdriver_monitoring_v1.yaml
create mode 100644 policies/templates/gcp_gke_enable_workload_identity_v1.yaml
create mode 100644 policies/templates/gcp_gke_legacy_abac_v1.yaml
create mode 100644 policies/templates/gcp_gke_master_authorized_networks_enabled_v1.yaml
create mode 100644 policies/templates/gcp_gke_node_auto_repair_v1.yaml
create mode 100644 policies/templates/gcp_gke_node_auto_upgrade_v1.yaml
create mode 100644 policies/templates/gcp_gke_private_cluster_v1.yaml
create mode 100644 policies/templates/gcp_gke_restrict_client_auth_methods_v1.yaml
create mode 100644 policies/templates/gcp_gke_restrict_pod_traffic_v1.yaml
create mode 100644 policies/templates/gcp_glb_external_ip_access_constraint_v1.yaml
create mode 100644 policies/templates/gcp_iam_allow_ban_roles_v1.yaml
create mode 100644 policies/templates/gcp_iam_allowed_bindings.yaml
create mode 100644 policies/templates/gcp_iam_allowed_policy_member_domains.yaml
create mode 100644 policies/templates/gcp_iam_audit_log.yaml
create mode 100644 policies/templates/gcp_iam_custom_role_permissions_v1.yaml
create mode 100644 policies/templates/gcp_iam_required_bindings_v1.yaml
create mode 100644 policies/templates/gcp_iam_restrict_service_account_creation_v1.yaml
create mode 100644 policies/templates/gcp_iam_restrict_service_account_key_age_v1.yaml
create mode 100644 policies/templates/gcp_iam_restrict_service_account_key_type_v1.yaml
create mode 100644 policies/templates/gcp_lb_forwarding_rules.yaml
create mode 100644 policies/templates/gcp_network_enable_firewall_logs_v1.yaml
create mode 100644 policies/templates/gcp_network_enable_flow_logs_v1.yaml
create mode 100644 policies/templates/gcp_network_enable_private_google_access_v1.yaml
create mode 100644 policies/templates/gcp_network_restrict_default_v1.yaml
create mode 100644 policies/templates/gcp_network_routing_v1.yaml
create mode 100644 policies/templates/gcp_resource_value_pattern_v1.yaml
create mode 100644 policies/templates/gcp_restricted_firewall_rules_v1.yaml
create mode 100644 policies/templates/gcp_serviceusage_allowed_services_v1.yaml
create mode 100644 policies/templates/gcp_spanner_location_v1.yaml
create mode 100644 policies/templates/gcp_sql_allowed_authorized_networks_v1.yaml
create mode 100644 policies/templates/gcp_sql_backup_v1.yaml
create mode 100644 policies/templates/gcp_sql_instance_type_v1.yaml
create mode 100644 policies/templates/gcp_sql_location_v1.yaml
create mode 100644 policies/templates/gcp_sql_maintenance_window_v1.yaml
create mode 100644 policies/templates/gcp_sql_public_ip_v1.yaml
create mode 100644 policies/templates/gcp_sql_ssl_v1.yaml
create mode 100644 policies/templates/gcp_sql_world_readable_v1.yaml
create mode 100644 policies/templates/gcp_storage_bucket_policy_only_v1.yaml
create mode 100644 policies/templates/gcp_storage_bucket_retention_v1.yaml
create mode 100644 policies/templates/gcp_storage_bucket_world_readable_v1.yaml
create mode 100644 policies/templates/gcp_storage_cmek_encryption_v1.yaml
create mode 100644 policies/templates/gcp_storage_location_v1.yaml
create mode 100644 policies/templates/gcp_storage_logging_v1.yaml
create mode 100644 policies/templates/gcp_vpc_sc_allowed_regions.yaml
create mode 100644 policies/templates/gcp_vpc_sc_ensure_access_levels_v1.yaml
create mode 100644 policies/templates/gcp_vpc_sc_ensure_project_v1.yaml
create mode 100644 policies/templates/gcp_vpc_sc_ensure_services_v1.yaml
create mode 100644 policies/templates/gcp_vpc_sc_ip_range_v1.yaml
create mode 100644 policies/templates/gcp_vpc_sc_project_perimeter.yaml
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ git push --set-upstream origin main
Enumerating objects: 118, done.
Counting objects: 100% (118/118), done.
Delta compression using up to 4 threads
Compressing objects: 100% (118/118), done.
Writing objects: 100% (118/118), 72.63 KiB | 2.69 MiB/s, done.
Total 118 (delta 87), reused 0 (delta 0), pack-reused 0
remote: Resolving deltas: 100% (87/87)
remote: Waiting for private key checker: 105/112 objects left
To https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-policies
* [new branch] main -> main
Branch 'main' set up to track remote branch 'main' from 'origin'.
michael@cloudshell:~/tef-oldev/github/gcp-policies (tef-oldev)$ cd ..
michael@cloudshell:~/tef-oldev/github (tef-oldev)$ gcloud source repos clone gcp-bootstrap --project=${cloudbuild_project_id}
Cloning into '/home/michael/tef-oldev/github/gcp-bootstrap'...
warning: You appear to have cloned an empty repository.
Project [prj-b-cicd-khce] repository [gcp-bootstrap] was cloned to [/home/michael/tef-oldev/github/gcp-bootstrap].
michael@cloudshell:~/tef-oldev/github (tef-oldev)$ cd gcp-bootstrap/
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ git checkout -b plan
Switched to a new branch 'plan'
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ mkdir -p envs/shared
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ cp -RT ../pbmm-on-gcp-onboarding/0-bootstrap/ ./envs/shared
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ cp ../pbmm-on-gcp-onboarding/build/cloudbuild-tf-* .
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ cp ../pbmm-on-gcp-onboarding/build/tf-wrapper.sh .
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ chmod 755 ./tf-wrapper.sh
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ git add .
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ git status
On branch plan
No commits yet
Changes to be committed:
(use "git rm --cached <file>..." to unstage)
new file: cloudbuild-tf-apply.yaml
new file: cloudbuild-tf-plan.yaml
new file: envs/shared/.gitignore
new file: envs/shared/.terraform.lock.hcl
new file: envs/shared/Dockerfile
new file: envs/shared/README-GitHub.md
new file: envs/shared/README-GitLab.md
new file: envs/shared/README-Jenkins.md
new file: envs/shared/README-Terraform-Cloud.md
new file: envs/shared/README.md
new file: envs/shared/backend.tf
new file: envs/shared/backend.tf.cloud.example
new file: envs/shared/backend.tf.example
new file: envs/shared/backend.tf.local
new file: envs/shared/bootstrap.tfplan
new file: envs/shared/cb.tf
new file: envs/shared/files/private_key_example.png
new file: envs/shared/github.tf.example
new file: envs/shared/gitlab.tf.example
new file: envs/shared/groups.tf
new file: envs/shared/jenkins.tf.example
new file: envs/shared/main.tf
new file: envs/shared/modules/cb-private-pool/README.md
new file: envs/shared/modules/cb-private-pool/main.tf
new file: envs/shared/modules/cb-private-pool/network.tf
new file: envs/shared/modules/cb-private-pool/outputs.tf
new file: envs/shared/modules/cb-private-pool/variables.tf
new file: envs/shared/modules/cb-private-pool/versions.tf
new file: envs/shared/modules/cb-private-pool/vpn_ha.tf
new file: envs/shared/modules/gitlab-oidc/main.tf
new file: envs/shared/modules/gitlab-oidc/outputs.tf
new file: envs/shared/modules/gitlab-oidc/variables.tf
new file: envs/shared/modules/gitlab-oidc/versions.tf
new file: envs/shared/modules/jenkins-agent/README.md
new file: envs/shared/modules/jenkins-agent/files/jenkins_gce_startup_script.sh
new file: envs/shared/modules/jenkins-agent/main.tf
new file: envs/shared/modules/jenkins-agent/outputs.tf
new file: envs/shared/modules/jenkins-agent/variables.tf
new file: envs/shared/modules/jenkins-agent/versions.tf
new file: envs/shared/modules/jenkins-agent/vpn_ha.tf
new file: envs/shared/modules/parent-iam-member/main.tf
new file: envs/shared/modules/parent-iam-member/variables.tf
new file: envs/shared/modules/parent-iam-member/versions.tf
new file: envs/shared/modules/parent-iam-remove-role/main.tf
new file: envs/shared/modules/parent-iam-remove-role/variables.tf
new file: envs/shared/modules/parent-iam-remove-role/versions.tf
new file: envs/shared/modules/tfc-agent-gke/README.md
new file: envs/shared/modules/tfc-agent-gke/main.tf
new file: envs/shared/modules/tfc-agent-gke/outputs.tf
new file: envs/shared/modules/tfc-agent-gke/variables.tf
new file: envs/shared/modules/tfc-agent-gke/versions.tf
new file: envs/shared/onprem.md
new file: envs/shared/outputs.tf
new file: envs/shared/outputs.tf.local
new file: envs/shared/provider.tf
new file: envs/shared/sa.tf
new file: envs/shared/scripts/git_create_branches_helper.sh
new file: envs/shared/scripts/push-to-repo.sh
new file: envs/shared/terraform-local.tf.example
new file: envs/shared/terraform.tfvars
new file: envs/shared/terraform_cloud.tf.example
new file: envs/shared/variables.tf
new file: envs/shared/versions.tf
new file: tf-wrapper.sh
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ git commit -m 'Initialize bootstrap repo'
[plan (root-commit) dba5737] Initialize bootstrap repo
64 files changed, 10063 insertions(+)
create mode 100644 cloudbuild-tf-apply.yaml
create mode 100644 cloudbuild-tf-plan.yaml
create mode 100644 envs/shared/.gitignore
create mode 100644 envs/shared/.terraform.lock.hcl
create mode 100644 envs/shared/Dockerfile
create mode 100644 envs/shared/README-GitHub.md
create mode 100644 envs/shared/README-GitLab.md
create mode 100644 envs/shared/README-Jenkins.md
create mode 100644 envs/shared/README-Terraform-Cloud.md
create mode 100644 envs/shared/README.md
create mode 100644 envs/shared/backend.tf
create mode 100644 envs/shared/backend.tf.cloud.example
create mode 100644 envs/shared/backend.tf.example
create mode 100644 envs/shared/backend.tf.local
create mode 100644 envs/shared/bootstrap.tfplan
create mode 100644 envs/shared/cb.tf
create mode 100644 envs/shared/files/private_key_example.png
create mode 100644 envs/shared/github.tf.example
create mode 100644 envs/shared/gitlab.tf.example
create mode 100644 envs/shared/groups.tf
create mode 100644 envs/shared/jenkins.tf.example
create mode 100644 envs/shared/main.tf
create mode 100644 envs/shared/modules/cb-private-pool/README.md
create mode 100644 envs/shared/modules/cb-private-pool/main.tf
create mode 100644 envs/shared/modules/cb-private-pool/network.tf
create mode 100644 envs/shared/modules/cb-private-pool/outputs.tf
create mode 100644 envs/shared/modules/cb-private-pool/variables.tf
create mode 100644 envs/shared/modules/cb-private-pool/versions.tf
create mode 100644 envs/shared/modules/cb-private-pool/vpn_ha.tf
create mode 100644 envs/shared/modules/gitlab-oidc/main.tf
create mode 100644 envs/shared/modules/gitlab-oidc/outputs.tf
create mode 100644 envs/shared/modules/gitlab-oidc/variables.tf
create mode 100644 envs/shared/modules/gitlab-oidc/versions.tf
create mode 100644 envs/shared/modules/jenkins-agent/README.md
create mode 100755 envs/shared/modules/jenkins-agent/files/jenkins_gce_startup_script.sh
create mode 100644 envs/shared/modules/jenkins-agent/main.tf
create mode 100644 envs/shared/modules/jenkins-agent/outputs.tf
create mode 100644 envs/shared/modules/jenkins-agent/variables.tf
create mode 100644 envs/shared/modules/jenkins-agent/versions.tf
create mode 100644 envs/shared/modules/jenkins-agent/vpn_ha.tf
create mode 100644 envs/shared/modules/parent-iam-member/main.tf
create mode 100644 envs/shared/modules/parent-iam-member/variables.tf
create mode 100644 envs/shared/modules/parent-iam-member/versions.tf
create mode 100644 envs/shared/modules/parent-iam-remove-role/main.tf
create mode 100644 envs/shared/modules/parent-iam-remove-role/variables.tf
create mode 100644 envs/shared/modules/parent-iam-remove-role/versions.tf
create mode 100644 envs/shared/modules/tfc-agent-gke/README.md
create mode 100644 envs/shared/modules/tfc-agent-gke/main.tf
create mode 100644 envs/shared/modules/tfc-agent-gke/outputs.tf
create mode 100644 envs/shared/modules/tfc-agent-gke/variables.tf
create mode 100644 envs/shared/modules/tfc-agent-gke/versions.tf
create mode 100644 envs/shared/onprem.md
create mode 100644 envs/shared/outputs.tf
create mode 100644 envs/shared/outputs.tf.local
create mode 100644 envs/shared/provider.tf
create mode 100644 envs/shared/sa.tf
create mode 100755 envs/shared/scripts/git_create_branches_helper.sh
create mode 100755 envs/shared/scripts/push-to-repo.sh
create mode 100644 envs/shared/terraform-local.tf.example
create mode 100644 envs/shared/terraform.tfvars
create mode 100644 envs/shared/terraform_cloud.tf.example
create mode 100644 envs/shared/variables.tf
create mode 100644 envs/shared/versions.tf
create mode 100755 tf-wrapper.sh
michael@cloudshell:~/tef-oldev/githu
check cloud build
1853 push to gcp-bootstrap
michael@cloudshell:~/tef-oldev/github/gcp-bootstrap (tef-oldev)$ git push --set-upstream origin plan
Enumerating objects: 77, done.
Counting objects: 100% (77/77), done.
Delta compression using up to 4 threads
Compressing objects: 100% (76/76), done.
Writing objects: 100% (77/77), 361.58 KiB | 10.33 MiB/s, done.
Total 77 (delta 24), reused 0 (delta 0), pack-reused 0
remote: Resolving deltas: 100% (24/24)
remote: Waiting for private key checker: 56/63 objects left
To https://source.developers.google.com/p/prj-b-cicd-khce/r/gcp-bootstrap
* [new branch] plan -> plan
Branch 'plan' set up to track remote branch 'plan' from 'origin'.
Additional local/cb retrofit for #423
value = local.scc_notification_name
ok
This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days
branch: https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/tree/gh421-cb-enable The current main is a partial local terraform retrofit that has a pending pr to complete the addition of local terraform capability - see workaround branch for now in #420
For example, in 0-bootstrap, the previous yaml for CB - cb.tf is commented as https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/0-bootstrap/cb.tf.dont_use Also the variables and output tf files need to be retrofitted back with the CB/CSR sections commented - in prep for use - like we do for github/githlab/tc
Either as part of #399 or earlier - put back the build so that cb.tf is listed as cb.tf.example with full readme instructions in addition to the variables/output changes.