diff --git a/tp-cloud/terraform/environments/dev/main.tf b/tp-cloud/terraform/environments/dev/main.tf index 547fa85..d5841a7 100644 --- a/tp-cloud/terraform/environments/dev/main.tf +++ b/tp-cloud/terraform/environments/dev/main.tf @@ -38,7 +38,23 @@ module "compute" { } module "iam" { - source = "../../modules/iam" - + source = "../../modules/iam" project_id = var.project_id +} + +data "google_client_openid_userinfo" "me" { +} + +resource "local_file" "ansible_config" { + content = templatefile("${path.module}/../../templates/ansible.cfg.tpl", + { + remote_user = data.google_client_openid_userinfo.me.email + } + ) + filename = "../../ansible/ansible.cfg" +} + +resource "local_file" "service_account" { + content = base64decode(module.iam.service_account_key) + filename = "../../ansible/service_account.json" } \ No newline at end of file diff --git a/tp-cloud/terraform/templates/ansible.cfg.tpl b/tp-cloud/terraform/templates/ansible.cfg.tpl index e69de29..f0a8d1f 100644 --- a/tp-cloud/terraform/templates/ansible.cfg.tpl +++ b/tp-cloud/terraform/templates/ansible.cfg.tpl @@ -0,0 +1,8 @@ +[defaults] +host_key_checking = False +inventory = gcp_compute.yml +interpreter_python = auto_silent +remote_user = ${replace(replace(remote_user, ".", "_"), "@", "_")} + +[inventory] +enable_plugins = gcp_compute, auto, host_list, yaml, ini, toml, script \ No newline at end of file