Git-Mirrors/constellation
1
0
Fork 0
mirror of https://github.com/edgelesssys/constellation.git synced 2025-02-02 18:44:49 -05:00
Code Issues Packages Projects Releases Wiki Activity

cli: use non-authoritative methods to manage iam policy memberships (#989)

Browse Source 
- google_project_iam_binding -> google_project_iam_member
This commit is contained in:
Malte Poll 2023-01-16 18:08:57 +01:00 committed by GitHub
parent d39cf1cd6e
commit 7902dc470f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
cli/internal/terraform/terraform/iam/gcp/main.tf
View File

@ -19,49 +19,34 @@ resource "google_service_account" "service_account" {
description = "Service account used inside Constellation" description = "Service account used inside Constellation"
} }
resource "google_project_iam_binding" "instance_admin_role" { resource "google_project_iam_member" "instance_admin_role" {
project = var.project_id project = var.project_id
role = "roles/compute.instanceAdmin.v1" role = "roles/compute.instanceAdmin.v1"
member = "serviceAccount:${google_service_account.service_account.email}"
members = [
"serviceAccount:${google_service_account.service_account.email}",
]
} }
resource "google_project_iam_binding" "network_admin_role" { resource "google_project_iam_member" "network_admin_role" {
project = var.project_id project = var.project_id
role = "roles/compute.networkAdmin" role = "roles/compute.networkAdmin"
member = "serviceAccount:${google_service_account.service_account.email}"
members = [
"serviceAccount:${google_service_account.service_account.email}",
]
} }
resource "google_project_iam_binding" "security_admin_role" { resource "google_project_iam_member" "security_admin_role" {
project = var.project_id project = var.project_id
role = "roles/compute.securityAdmin" role = "roles/compute.securityAdmin"
member = "serviceAccount:${google_service_account.service_account.email}"
members = [
"serviceAccount:${google_service_account.service_account.email}",
]
} }
resource "google_project_iam_binding" "storage_admin_role" { resource "google_project_iam_member" "storage_admin_role" {
project = var.project_id project = var.project_id
role = "roles/compute.storageAdmin" role = "roles/compute.storageAdmin"
member = "serviceAccount:${google_service_account.service_account.email}"
members = [
"serviceAccount:${google_service_account.service_account.email}",
]
} }
resource "google_project_iam_binding" "iam_service_account_user_role" { resource "google_project_iam_member" "iam_service_account_user_role" {
project = var.project_id project = var.project_id
role = "roles/iam.serviceAccountUser" role = "roles/iam.serviceAccountUser"
member = "serviceAccount:${google_service_account.service_account.email}"
members = [
"serviceAccount:${google_service_account.service_account.email}",
]
} }
resource "google_service_account_key" "service_account_key" { resource "google_service_account_key" "service_account_key" {