talexander/infra_snippets
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add binding.

Browse Source
This commit is contained in:
Tom Alexander 2021-07-18 17:16:34 -04:00
parent 94b6a187e0
commit 349d40c8f6
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
terraform/modules/workload_identity_account/workload_identity_account.tf
View File

@ -27,3 +27,18 @@ resource "google_service_account" "service_account" {
account_id = "wi-${var.k8s_namespace}-${var.k8s_service_account}"
display_name = "Workload identity account for GKE [${var.k8s_namespace}/${var.k8s_service_account}]"
}
data "google_iam_policy" "policy" {
binding {
role = "roles/iam.workloadIdentityUser"
members = [
"serviceAccount:${var.project}.svc.id.goog[${var.k8s_namespace}/${var.k8s_service_account}]",
]
}
}
resource "google_service_account_iam_policy" "policy_binding" {
service_account_id = google_service_account.service_account.name
policy_data = data.google_iam_policy.policy.policy_data
}