Dan HeathandRobin Beck
5ce6515156
* docs: IA reorganization * docs: Updates * docs: Updates * docs: Fix links * docs: Updates * docs: Fix a typo * docs: Fix client agent topic * docs: Update Client Agent nav * docs: Fix conflict * docs: Fix a typo in Client Agent docs (#5853) * docs: Fix client agent topic * docs: Updates * docs: Updates * docs: Updates * docs: Updates * docs: Fixes get started and operations links * docs: Update nav * docs: Partials * docs: Unix partials * docs: Worker partials * docs: Updates * docs: Update workers and targets * docs: Updates * docs: Updates * docs: Fixes link * docs: Updates after sync review * docs: Updates from review feedback * docs: Move worker filter examples * docs: Fix links * docs: Updates for filters based on working session * docs: Fixes broken links * docs: Add links to other filter topics * docs: Update list intro * docs: Adds link * docs: Fixes redirects * docs: Fixes redirects * docs: Deleted mysql page from TOC * docs: Add versioned redirect * docs: Adds versioned redirects * docs: Adds versioned redirects * docs: Update redirects * docs: Update redirects * docs: Redirect fixes * docs: Update redirect format * docs: Fix a typo * docs: Fixes redirects * docs: Fixes redirect * docs: Adds links out to client agent troubleshooting * uses /etc/boundary.d/ as recommended installation directory (#6003) * docs: Updates legacy io links * docs: Fixes redirects * docs: Fix redirect * docs: Restoring deleted file --------- Co-authored-by: Robin Beck <stellarsquall@users.noreply.github.com>
59 lines
2.4 KiB
Plaintext
59 lines
2.4 KiB
Plaintext
---
|
|
layout: docs
|
|
page_title: Terraform patterns for scopes
|
|
description: >-
|
|
Use Terraform patterns to create and manage Boundary scopes. Learn how to configure global, org-level, and project-level scopes using the Boundary provider.
|
|
---
|
|
|
|
# Terraform patterns for scopes
|
|
|
|
You can use the following patterns to create org-level and project-level scopes.
|
|
|
|
## Requirements
|
|
|
|
This document assumes the reader has:
|
|
|
|
- An understanding of [Terraform](/terraform/docs) fundamentals.
|
|
- An existing Boundary installation. Refer to [Deploy Boundary in a self-managed environment](/boundary/docs/deploy/self-managed) to learn about deploying Boundary.
|
|
- Configured the [Terraform Boundary provider](/boundary/docs/deploy/terraform-patterns/#terraform-provider-configuration).
|
|
|
|
## Scopes configuration
|
|
|
|
The `scope_id` parameter determines what kind of scope to create according to these rules:
|
|
|
|
- If `scope_id` is the global scope, an org-level scope is created.
|
|
- If `scope_id` is an org-level scope, a project-level scope is created.
|
|
- If `scope_id` is a project-level scope, a nested project-level scope is created.
|
|
|
|
```hcl
|
|
resource "boundary_scope" "project" {
|
|
name = "Basic Boundary Demo"
|
|
description = "First Ever Boundary Demo"
|
|
|
|
# This parameter is the parent scope. It can be either the global scope, an
|
|
# org-level scope, or a project-level scope.
|
|
scope_id = var.se_org_scope
|
|
|
|
# Using the auto_create_x_role flags can help you get set up faster
|
|
# becasue you won't have to explicitly define these roles.
|
|
auto_create_admin_role = true
|
|
auto_create_default_role = true
|
|
}
|
|
```
|
|
|
|
## More information
|
|
|
|
For more information about the Boundary resources mentioned in this topic, refer to the domain model documentation:
|
|
|
|
- [Scopes](/boundary/docs/domain-model/scopes)
|
|
- [Org-level scopes](/boundary/docs/domain-model/scopes#organizations)
|
|
- [Project-level scopes](/boundary/docs/domain-model/scopes#projects)
|
|
|
|
For more information about managing the following resources using Terraform, refer to the Boundary provider documentation:
|
|
|
|
- [Scopes](https://registry.terraform.io/providers/hashicorp/boundary/latest/docs/resources/scope/)
|
|
|
|
## Next steps
|
|
|
|
You use scopes to partition resources and assign them to users.
|
|
Once you have created scopes, you may want to create [users and auth methods](/boundary/docs/deploy/terraform-patterns/terraform-users-and-auth-methods). |