iam

terraform/environments/dev/main.tf

@@ -41,8 +41,23 @@ module "compute" {
 }
 
 module "iam" {
-  source = "../../modules/iam"
+  source     = "../../modules/iam"
-  
-  # Variables d'entrée
   project_id = var.project_id
+}
+
+data "google_client_openid_userinfo" "me" {
+}
+
+resource "local_file" "ansible_config" {
+  content = templatefile("${path.module}/../../templates/ansible.cfg.tpl",
+    {
+      remote_user = data.google_client_openid_userinfo.me.email
+    }
+  )
+  filename = "../../../ansible/ansible.cfg"
+}
+
+resource "local_file" "service_account" {
+  content  = base64decode(module.iam.service_account_key)
+  filename = "../../../ansible/service_account.json"
 }

terraform/templates/ansible.cfg.tpl

@@ -0,0 +1,8 @@
+[defaults]
+host_key_checking = False
+inventory = gcp_compute.yml
+interpreter_python = auto_silent
+remote_user = ${replace(replace(remote_user, ".", "_"), "@", "_")}
+
+[inventory]
+enable_plugins = gcp_compute, auto, host_list, yaml, ini, toml, script