forseti-security / terraform-google-forseti

A Terraform module for installing Forseti on GCP
Apache License 2.0
132 stars 127 forks source link

Output more GCE things #613

Closed gaima8 closed 3 years ago

gaima8 commented 3 years ago

Hi,

I'm trying to use terraform to create IAM bindings on the Forseti client VM. The client module isn't outputting enough for me to find the VM.

All the possible GCE instances are created in "non-standard" zones ("${var.XYZ_region}-c"), i.e. not the provider zone. Therefore google_compute_instance can't find the instance.

Error: Cannot determine zone: set in this resource, or set provider-level zone.

For now I'll hard code the same logic for specifying the zone and not try to use google_compute_instance to find the zone.

Could you output something like forseti-client-vm-zone? Server and cloudsql too. Maybe self_link as well, or instead of.