diff --git a/tp-cloud/terraform/environments/dev/main.tf b/tp-cloud/terraform/environments/dev/main.tf index d6ec5bd..87da186 100644 --- a/tp-cloud/terraform/environments/dev/main.tf +++ b/tp-cloud/terraform/environments/dev/main.tf @@ -31,4 +31,9 @@ module "compute" { frontend_subnet_id = module.network.subnet_ids.frontend backend_subnet_id = module.network.subnet_ids.backend database_subnet_id = module.network.subnet_ids.database +} + +module "iam" { + source = "../../modules/iam" + project_id = var.project_id } \ No newline at end of file diff --git a/tp-cloud/terraform/modules/iam/main.tf b/tp-cloud/terraform/modules/iam/main.tf index e69de29..3357ab5 100644 --- a/tp-cloud/terraform/modules/iam/main.tf +++ b/tp-cloud/terraform/modules/iam/main.tf @@ -0,0 +1,27 @@ +resource "google_service_account" "service_account" { + account_id = "terraform" + display_name = "terraform" +} + +resource "google_service_account_key" "mykey" { + service_account_id = google_service_account.service_account.name + public_key_type = "TYPE_X509_PEM_FILE" +} + +resource "google_project_iam_binding" "custom_service_account" { + project = var.project_id + role = "roles/viewer" + + members = [ + "serviceAccount:${google_service_account.service_account.email}", + ] +} + +data "google_client_openid_userinfo" "me" { +} + +resource "google_os_login_ssh_public_key" "cache" { + user = data.google_client_openid_userinfo.me.email + key = file("~/.ssh/id_ed25519.pub") + project = var.project_id +} \ No newline at end of file diff --git a/tp-cloud/terraform/modules/iam/outputs.tf b/tp-cloud/terraform/modules/iam/outputs.tf index e69de29..52b858b 100644 --- a/tp-cloud/terraform/modules/iam/outputs.tf +++ b/tp-cloud/terraform/modules/iam/outputs.tf @@ -0,0 +1,10 @@ +output "email" { + description = "Service account email." + value = google_service_account.service_account.email +} + +output "key" { + description = "Service account private key." + sensitive = true + value = google_service_account_key.mykey.private_key +} \ No newline at end of file diff --git a/tp-cloud/terraform/modules/iam/variables.tf b/tp-cloud/terraform/modules/iam/variables.tf index e69de29..99b55b3 100644 --- a/tp-cloud/terraform/modules/iam/variables.tf +++ b/tp-cloud/terraform/modules/iam/variables.tf @@ -0,0 +1,4 @@ +variable "project_id" { + description = "ID du projet" + type = string +} \ No newline at end of file