ajout des configs terraform

This commit is contained in:
2025-12-03 16:48:20 +01:00
parent f41cd5130b
commit f48c698399
7 changed files with 0 additions and 220 deletions

View File

@@ -1,30 +0,0 @@
resource "google_service_account" "terraform_sa" {
project = var.project_id
account_id = var.service_account_name
display_name = "Terraform Deployment SA"
}
resource "google_project_iam_member" "sa_roles" {
for_each = toset([
"roles/compute.admin",
"roles/iam.serviceAccountUser"
])
project = var.project_id
role = each.key
member = "serviceAccount:${google_service_account.terraform_sa.email}"
}
resource "google_project_iam_member" "oslogin_roles" {
for_each = toset([
"roles/compute.osLogin",
"roles/iam.serviceAccountUser"
])
project = var.project_id
role = each.key
member = "user:${var.gcp_user_email}"
}
resource "google_os_login_ssh_public_key" "user_ssh_key" {
user = var.gcp_user_email
key = var.ssh_public_key
}

View File

@@ -1,13 +0,0 @@
output "service_account_email" {
description = "L'email du compte de service créé."
value = google_service_account.terraform_sa.email
}
# La clé n'est pas exposée ici mais l'output est là pour l'exercice (décommenter si nécessaire)
/*
output "service_account_key" {
description = "La clé privée encodée du compte de service."
value = google_service_account_key.terraform_sa_key.private_key_base64
sensitive = true
}
*/

View File

@@ -1,20 +0,0 @@
variable "project_id" {
description = "L'ID du projet GCP."
type = string
}
variable "service_account_name" {
description = "Nom du compte de service Terraform."
type = string
default = "terraform-deployer"
}
variable "gcp_user_email" {
description = "Votre adresse e-mail GCP (pour OS Login)."
type = string
}
variable "ssh_public_key" {
description = "Votre clé publique SSH (contenu du fichier ~/.ssh/id_ed25519.pub)."
type = string
}