kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

First commit.

Browse Source 
TODO:
 - fix error on destroy
 - improve robot service account handling
This commit is contained in:
Lorenzo Caggioni
2020-06-26 21:45:41 +02:00
parent 1dfc1f5954
commit 9a4ec24093
17 changed files with 927 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/project/service_accounts.tf
View File

@@ -17,6 +17,8 @@
locals {
service_account_cloud_services = "${google_project.project.number}@cloudservices.gserviceaccount.com"
service_accounts_default = {
# TODO: Find a better place to store BQ service account
bq = "bq-${google_project.project.number}@bigquery-encryption.iam.gserviceaccount.com"
compute = "${google_project.project.number}-compute@developer.gserviceaccount.com"
gae = "${google_project.project.project_id}@appspot.gserviceaccount.com"
}
@@ -26,6 +28,7 @@ locals {
compute = "compute-system"
container-engine = "container-engine-robot"
containerregistry = "containerregistry"
dataflow = "dataflow-service-producer-prod"
dataproc = "dataproc-accounts"
gae-flex = "gae-api-prod"
gcf = "gcf-admin-robot"