Tenant deployment resource management

[manudawber]

I'm attempting to deploy a FAST tenant but am encountering issues and want to clarify the order of operations. So far I've:

1. Run 0-bootstrap
2. Run 1-resman
3. Run 0-bootstrap with the resman-tenants addon configured:

   fast_addon = {
     tenants = {
       parent_stage = "1-resman"
     }
   }
   

4. Run 1-resman-tenants with minimal config:

   tenant_configs = {
     f1 = {
       admin_principal = "group:[email protected]"
       descriptive_name = "Tenant 1"
       fast_config = {}
     }
   }
   

I now have Tenant 1 Core and Tenant 1 folder, the next step is to run a copy of 1-resman using the outputs from these previous stages.

I've copied the output files using fast-links.sh and in my tenant data folder I have a selection of the sample YAML files:

When I run a plan I get a number of errors:

• The custom_roles provided by the bootstrap tfvars file is missing billing_viewer and project_iam_viewer.
• Role assignments for service accounts which use shorthand (e.g. project-factory-ro, security-rw) are failing as they aren't valid principal strings.
• If I manually specify the required custom roles I get permission denied when trying to read/edit the context and environment tags.

I can navigate these manually, e.g. by copying over custom_roles or modifying permissions, but I'm wondering if I'm missing something?