forked from pierront/but3-iac
49 lines
966 B
HCL
49 lines
966 B
HCL
|
|
|
|
resource "google_service_account" "terraform" {
|
|
project = var.project_id
|
|
account_id = "terraform-sa"
|
|
display_name = "Terraform Service Account"
|
|
}
|
|
|
|
|
|
resource "google_service_account_key" "terraform" {
|
|
service_account_id = google_service_account.terraform.name
|
|
}
|
|
|
|
|
|
|
|
|
|
locals {
|
|
terraform_roles = [
|
|
"roles/compute.admin",
|
|
"roles/compute.networkAdmin",
|
|
"roles/iam.serviceAccountUser",
|
|
]
|
|
}
|
|
|
|
resource "google_project_iam_member" "terraform_roles" {
|
|
for_each = toset(local.terraform_roles)
|
|
|
|
project = var.project_id
|
|
role = each.value
|
|
member = "serviceAccount:${google_service_account.terraform.email}"
|
|
}
|
|
|
|
|
|
|
|
|
|
resource "google_compute_project_metadata_item" "enable_oslogin" {
|
|
project = var.project_id
|
|
key = "enable-oslogin"
|
|
value = "TRUE"
|
|
}
|
|
|
|
|
|
resource "google_compute_project_metadata_item" "ssh_keys" {
|
|
project = var.project_id
|
|
key = "ssh-keys"
|
|
value = "student:${chomp(file("~/.ssh/id_ed25519.pub"))}"
|
|
}
|
|
|