forked from pierront/but3-iac
iam
This commit is contained in:
File diff suppressed because one or more lines are too long
File diff suppressed because one or more lines are too long
@@ -1,22 +1,30 @@
|
|||||||
resource "google_service_account" "terraform_sa" {
|
resource "google_service_account" "terraform_sa" {
|
||||||
account_id = "terraform-sa"
|
account_id = "terraform"
|
||||||
project = var.project_id
|
project = var.project_id
|
||||||
display_name = "Terraform Service Account"
|
display_name = "Terraform Service Account"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
resource "google_service_account_key" "terraform_sa_key" {
|
resource "google_service_account_key" "terraform_sa_key" {
|
||||||
service_account_id = google_service_account.terraform_sa.name
|
service_account_id = google_service_account.terraform_sa.name
|
||||||
private_key_type = "TYPE_GOOGLE_CREDENTIALS_FILE"
|
private_key_type = "TYPE_GOOGLE_CREDENTIALS_FILE" //TYPE_X509_PEM_FILE fonctionne pas
|
||||||
}
|
}
|
||||||
|
|
||||||
resource "google_project_iam_member" "terraform_owner" {
|
|
||||||
|
resource "google_project_iam_binding" "viewer_binding" {
|
||||||
project = var.project_id
|
project = var.project_id
|
||||||
role = "roles/owner"
|
role = "roles/viewer"
|
||||||
member = "serviceAccount:${google_service_account.terraform_sa.email}"
|
|
||||||
|
members = [
|
||||||
|
"serviceAccount:${google_service_account.terraform_sa.email}"
|
||||||
|
]
|
||||||
}
|
}
|
||||||
|
|
||||||
|
data "google_client_openid_userinfo" "me" {}
|
||||||
|
|
||||||
resource "google_os_login_ssh_public_key" "ssh_key" {
|
resource "google_os_login_ssh_public_key" "ssh_key" {
|
||||||
project = var.project_id
|
project = var.project_id
|
||||||
user = "clemenceducreux459@gmail.com"
|
user = data.google_client_openid_userinfo.me.email
|
||||||
key = file(pathexpand("~/.ssh/id_ed25519.pub"))
|
key = file(pathexpand("~/.ssh/id_ed25519.pub"))
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user