mommeja/but3-iac
1
0
Fork 0
forked from pierront/but3-iac
Code Pull Requests Activity

iam

Browse Source
This commit is contained in:
Tom MOMMEJA
2025-12-04 10:09:24 +01:00
parent ab5a94d914
commit 7c8f481e63
2 changed files with 15 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

34
tp-cloud/terraform/modules/iam/main.tf
View File

@@ -1,31 +1,25 @@
resource "google_service_account" "terraform_sa" { resource "google_service_account" "terraform_sa" {
account_id = "terraform-admin" account_id = "terraform"
display_name = "Terraform Administrative Service Account" display_name = "Terraform Automation Service Account"
} }
# 2. Clé du compte de service
resource "google_service_account_key" "terraform_sa_key" { resource "google_service_account_key" "terraform_sa_key" {
service_account_id = google_service_account.terraform_sa.name service_account_id = google_service_account.terraform_sa.name
public_key_type = "TYPE_X509_PEM_FILE" public_key_type = "TYPE_X509_PEM_FILE"
} }
resource "google_project_iam_member" "terraform_roles" { resource "google_project_iam_binding" "terraform_viewer" {
for_each = toset([
"roles/compute.admin",
"roles/iam.serviceAccountUser",
"roles/resourcemanager.projectIamAdmin",
"roles/compute.osLogin",
"roles/compute.networkAdmin",
])
project = var.project_id project = var.project_id
role = each.value role = "roles/viewer"
member = "serviceAccount:${google_service_account.terraform_sa.email}"
members = [
"serviceAccount:${google_service_account.terraform_sa.email}"
]
} }
resource "google_compute_project_metadata" "oslogin" { data "google_client_openid_userinfo" "me" {}
metadata = {
enable-oslogin = "TRUE" resource "google_os_login_ssh_public_key" "user_ssh_key" {
ssh-keys = "student:${file("~/.ssh/id_ed25519.pub")}" user = data.google_client_openid_userinfo.me.email
} key = file("~/.ssh/id_ed25519.pub")
} }

2
tp-cloud/terraform/modules/iam/outputs.tf
View File

@@ -7,4 +7,4 @@ output "service_account_key" {
description = "Clé privée du compte de service Terraform" description = "Clé privée du compte de service Terraform"
value = google_service_account_key.terraform_sa_key.private_key value = google_service_account_key.terraform_sa_key.private_key
sensitive = true sensitive = true
} }