Merge pull request #6 from ingwarr/master

Add support for Terraform v0.12 #5

Author: aaron-lane

CHANGELOG.md

@@ -8,6 +8,10 @@ and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+### CHANGED
+
+- Upgraded for usage with terraform-0.12.x [#6]
+
 
 ## [0.1.1] - 2019-06-14
 
@@ -26,3 +30,4 @@ and this project adheres to
 [0.1.0]: https://github.com/terraform-google-modules/terraform-google-service-accounts/releases/tag/v0.1.0
 [#3]: https://github.com/terraform-google-modules/terraform-google-service-accounts/pull/3
 [#1]: https://github.com/terraform-google-modules/terraform-google-service-accounts/pull/1
+[#6]: https://github.com/terraform-google-modules/terraform-google-service-accounts/pull/6

Gemfile

@@ -15,5 +15,5 @@
 ruby '2.5.3'
 
 source 'https://rubygems.org/' do
-  gem 'kitchen-terraform', '~> 4.8'
+  gem 'kitchen-terraform', '~> 4.9'
 end

Makefile

@@ -21,7 +21,7 @@ SHELL := /usr/bin/env bash
 # Docker build config variables
 CREDENTIALS_PATH 			?= /cft/workdir/credentials.json
 DOCKER_ORG 				:= gcr.io/cloud-foundation-cicd
-DOCKER_TAG_BASE_KITCHEN_TERRAFORM 	?= 1.0.1
+DOCKER_TAG_BASE_KITCHEN_TERRAFORM 	?= 2.3.0
 DOCKER_REPO_BASE_KITCHEN_TERRAFORM 	:= ${DOCKER_ORG}/cft/kitchen-terraform:${DOCKER_TAG_BASE_KITCHEN_TERRAFORM}
 
 # All is the first target in the file so it will get picked up when you just run 'make' on its own
@@ -30,7 +30,7 @@ all: check generate_docs
 
 # Run all available linters
 .PHONY: check
-check: check_shell check_python check_golang check_terraform check_docker check_base_files test_check_headers check_headers check_trailing_whitespace
+check: check_shell check_python check_golang check_terraform check_base_files test_check_headers check_headers check_trailing_whitespace
 
 # The .PHONY directive tells make that this isn't a real target and so
 # the presence of a file named 'check_shell' won't cause this target to stop
@@ -95,7 +95,7 @@ docker_run:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		/bin/bash -c "source test/ci_integration.sh && setup_environment && exec /bin/bash"
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && exec /bin/bash"
 
 .PHONY: docker_create
 docker_create:
@@ -105,7 +105,7 @@ docker_create:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		/bin/bash -c "source test/ci_integration.sh && setup_environment && kitchen create"
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && kitchen create"
 
 .PHONY: docker_converge
 docker_converge:
@@ -115,7 +115,7 @@ docker_converge:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		/bin/bash -c "source test/ci_integration.sh && setup_environment && kitchen converge"
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && kitchen converge"
 
 .PHONY: docker_verify
 docker_verify:
@@ -125,7 +125,7 @@ docker_verify:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		/bin/bash -c "source test/ci_integration.sh && setup_environment && kitchen verify"
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && kitchen verify"
 
 .PHONY: docker_destroy
 docker_destroy:
@@ -135,7 +135,7 @@ docker_destroy:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		/bin/bash -c "source test/ci_integration.sh && setup_environment && kitchen destroy"
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && kitchen destroy"
 
 .PHONY: test_integration_docker
 test_integration_docker:
@@ -145,4 +145,4 @@ test_integration_docker:
 		-e GOOGLE_APPLICATION_CREDENTIALS=${CREDENTIALS_PATH} \
 		-v $(CURDIR):/cft/workdir \
 		${DOCKER_REPO_BASE_KITCHEN_TERRAFORM} \
-		make test_integration
+		/bin/bash -c "cd /cft/workdir && source test/ci_integration.sh && setup_environment && make test_integration"

README.md

@@ -10,6 +10,12 @@ The resources/services/activations/deletions that this module will create/trigge
 - two optional organization-level IAM bindings per service account, to enable the service accounts to create and manage Shared VPC networks
 - one optional service account key per service account
 
+## Compatibility
+
+ This module is meant for use with Terraform 0.12. If you haven't [upgraded](https://www.terraform.io/upgrade-guides/0-12.html)
+  and need a Terraform 0.11.x-compatible version of this module, the last released version intended for
+  Terraform 0.11.x is [0.1.1](https://registry.terraform.io/modules/terraform-google-modules/service-accounts/google/0.1.1).
+
 ## Usage
 
 Basic usage of this module is as follows:
@@ -67,7 +73,7 @@ These sections describe requirements for using this module.
 
 The following dependencies must be available:
 
-- [Terraform][terraform] v0.11
+- [Terraform][terraform] v0.12
 - [Terraform Provider for GCP][terraform-provider-gcp] plugin >= v2.0
 
 ### IAM

examples/multiple_service_accounts/main.tf

@@ -20,7 +20,7 @@ provider "google" {
 
 module "service_accounts" {
   source        = "../.."
-  project_id    = "${var.project_id}"
+  project_id    = var.project_id
   prefix        = ""
   names         = ["test-first", "test-second"]
   generate_keys = true
@@ -30,3 +30,4 @@ module "service_accounts" {
     "${var.project_id}=>roles/storage.objectViewer",
   ]
 }
+

examples/multiple_service_accounts/outputs.tf

@@ -16,15 +16,16 @@
 
 output "emails" {
   description = "The service account emails."
-  value       = "${values(module.service_accounts.emails)}"
+  value       = values(module.service_accounts.emails)
 }
 
 output "iam_emails" {
   description = "The service account IAM-format emails."
-  value       = "${values(module.service_accounts.iam_emails)}"
+  value       = values(module.service_accounts.iam_emails)
 }
 
 output "keys" {
   description = "The service account keys."
-  value       = "${module.service_accounts.keys}"
+  value       = module.service_accounts.keys
 }
+

examples/multiple_service_accounts/variables.tf

@@ -16,5 +16,6 @@
 
 variable "project_id" {
   description = "The ID of the project in which to provision resources."
-  type        = "string"
+  type        = string
 }
+

examples/multiple_service_accounts/versions.tf

@@ -0,0 +1,19 @@
+/**
+ * Copyright 2019 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+terraform {
+  required_version = ">= 0.12"
+}

examples/single_service_account/main.tf

@@ -20,8 +20,9 @@ provider "google" {
 
 module "service_accounts" {
   source        = "../.."
-  project_id    = "${var.project_id}"
-  prefix        = "${var.prefix}"
+  project_id    = var.project_id
+  prefix        = var.prefix
   names         = ["single-account"]
   project_roles = ["${var.project_id}=>roles/viewer"]
 }
+

examples/single_service_account/outputs.tf

@@ -16,10 +16,11 @@
 
 output "email" {
   description = "The service account email."
-  value       = "${module.service_accounts.email}"
+  value       = module.service_accounts.email
 }
 
 output "iam_email" {
   description = "The service account IAM-format email."
-  value       = "${module.service_accounts.iam_email}"
+  value       = module.service_accounts.iam_email
 }
+