forked from pierront/but3-iac
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
This commit is contained in:
@@ -0,0 +1,31 @@
|
||||
# Compte de service Terraform
|
||||
resource "google_service_account" "terraform" {
|
||||
account_id = "terraform"
|
||||
display_name = "Terraform Service Account"
|
||||
project = var.project_id
|
||||
}
|
||||
|
||||
# Clé du compte de service
|
||||
resource "google_service_account_key" "terraform_key" {
|
||||
service_account_id = google_service_account.terraform.name
|
||||
}
|
||||
|
||||
# IAM Roles
|
||||
resource "google_project_iam_member" "compute_admin" {
|
||||
project = var.project_id
|
||||
role = "roles/compute.admin"
|
||||
member = "serviceAccount:${google_service_account.terraform.email}"
|
||||
}
|
||||
|
||||
resource "google_project_iam_member" "network_admin" {
|
||||
project = var.project_id
|
||||
role = "roles/compute.networkAdmin"
|
||||
member = "serviceAccount:${google_service_account.terraform.email}"
|
||||
}
|
||||
|
||||
resource "google_project_iam_member" "editor" {
|
||||
project = var.project_id
|
||||
role = "roles/editor"
|
||||
member = "serviceAccount:${google_service_account.terraform.email}"
|
||||
}
|
||||
|
||||
|
||||
@@ -0,0 +1,9 @@
|
||||
output "service_account_email" {
|
||||
value = google_service_account.terraform.email
|
||||
}
|
||||
|
||||
output "service_account_key" {
|
||||
value = google_service_account_key.terraform_key.private_key
|
||||
sensitive = true
|
||||
}
|
||||
|
||||
|
||||
@@ -0,0 +1,5 @@
|
||||
variable "project_id" {
|
||||
description = "ID du projet GCP"
|
||||
type = string
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user