Files
but3-iac/terraform/modules/iam/main.tf

32 lines
910 B
HCL

# Compte de service Terraform
resource "google_service_account" "terraform" {
account_id = "terraform"
display_name = "Terraform Service Account"
project = var.project_id
}
# Clé du compte de service
resource "google_service_account_key" "terraform_key" {
service_account_id = google_service_account.terraform.name
}
# IAM Roles
resource "google_project_iam_member" "compute_admin" {
project = var.project_id
role = "roles/compute.admin"
member = "serviceAccount:${google_service_account.terraform.email}"
}
resource "google_project_iam_member" "network_admin" {
project = var.project_id
role = "roles/compute.networkAdmin"
member = "serviceAccount:${google_service_account.terraform.email}"
}
resource "google_project_iam_member" "editor" {
project = var.project_id
role = "roles/editor"
member = "serviceAccount:${google_service_account.terraform.email}"
}