forked from pierront/but3-iac
ajout des configs terraform
This commit is contained in:
@@ -1,30 +0,0 @@
|
||||
resource "google_service_account" "terraform_sa" {
|
||||
project = var.project_id
|
||||
account_id = var.service_account_name
|
||||
display_name = "Terraform Deployment SA"
|
||||
}
|
||||
|
||||
resource "google_project_iam_member" "sa_roles" {
|
||||
for_each = toset([
|
||||
"roles/compute.admin",
|
||||
"roles/iam.serviceAccountUser"
|
||||
])
|
||||
project = var.project_id
|
||||
role = each.key
|
||||
member = "serviceAccount:${google_service_account.terraform_sa.email}"
|
||||
}
|
||||
|
||||
resource "google_project_iam_member" "oslogin_roles" {
|
||||
for_each = toset([
|
||||
"roles/compute.osLogin",
|
||||
"roles/iam.serviceAccountUser"
|
||||
])
|
||||
project = var.project_id
|
||||
role = each.key
|
||||
member = "user:${var.gcp_user_email}"
|
||||
}
|
||||
|
||||
resource "google_os_login_ssh_public_key" "user_ssh_key" {
|
||||
user = var.gcp_user_email
|
||||
key = var.ssh_public_key
|
||||
}
|
||||
@@ -1,13 +0,0 @@
|
||||
output "service_account_email" {
|
||||
description = "L'email du compte de service créé."
|
||||
value = google_service_account.terraform_sa.email
|
||||
}
|
||||
|
||||
# La clé n'est pas exposée ici mais l'output est là pour l'exercice (décommenter si nécessaire)
|
||||
/*
|
||||
output "service_account_key" {
|
||||
description = "La clé privée encodée du compte de service."
|
||||
value = google_service_account_key.terraform_sa_key.private_key_base64
|
||||
sensitive = true
|
||||
}
|
||||
*/
|
||||
@@ -1,20 +0,0 @@
|
||||
variable "project_id" {
|
||||
description = "L'ID du projet GCP."
|
||||
type = string
|
||||
}
|
||||
|
||||
variable "service_account_name" {
|
||||
description = "Nom du compte de service Terraform."
|
||||
type = string
|
||||
default = "terraform-deployer"
|
||||
}
|
||||
|
||||
variable "gcp_user_email" {
|
||||
description = "Votre adresse e-mail GCP (pour OS Login)."
|
||||
type = string
|
||||
}
|
||||
|
||||
variable "ssh_public_key" {
|
||||
description = "Votre clé publique SSH (contenu du fichier ~/.ssh/id_ed25519.pub)."
|
||||
type = string
|
||||
}
|
||||
Reference in New Issue
Block a user