talexander/infra_snippets
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Start a module for creating a workload identity service account.

Browse Source
This commit is contained in:
Tom Alexander 2021-07-18 16:55:55 -04:00
parent bae77832d2
commit 06b787ef97
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
2 changed files with 15 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
terraform/basic_gke/main.tf
View File

@ -105,6 +105,13 @@ module "cloudsql" {
]
}
# Create a workload identity service account for IAM authentication to
# cloudsql
module "cloudsql_test_sa" {
source = "../modules/workload_identity_account"
project = var.project
}
#################### Redis ################################
module "redis" {
@ -127,9 +134,3 @@ output "redis_port" {
description = "Port for redis database."
value = module.redis.redis_port
}

8
terraform/modules/workload_identity_account/workload_identity_account.tf Normal file
View File

@ -0,0 +1,8 @@
# Requires a google_iam_workload_identity_pool to exist, but it is not
# referenced in this module.
variable "project" {
description = "Project ID."
type = string
}