kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Move bq robot service account into the robot service account project output (#262)

Browse Source
This commit is contained in:
lcaggio
2021-06-11 13:02:30 +02:00
committed by GitHub
parent d1b560c76d
commit efb52eeb6c
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
modules/project/service_accounts.tf
View File

@@ -17,12 +17,11 @@
locals {
service_account_cloud_services = "${local.project.number}@cloudservices.gserviceaccount.com"
service_accounts_default = {
# TODO: Find a better place to store BQ service account
bq = "bq-${local.project.number}@bigquery-encryption.iam.gserviceaccount.com"
compute = "${local.project.number}-compute@developer.gserviceaccount.com"
gae = "${local.project.project_id}@appspot.gserviceaccount.com"
}
service_accounts_robot_services = {
bq = "bigquery-encryption"
cloudasset = "gcp-sa-cloudasset"
cloudbuild = "gcp-sa-cloudbuild"
compute = "compute-system"
@@ -37,6 +36,6 @@ locals {
}
service_accounts_robots = {
for service, name in local.service_accounts_robot_services :
service => "service-${local.project.number}@${name}.iam.gserviceaccount.com"
service => "${service == "bq" ? "bq" : "service"}-${local.project.number}@${name}.iam.gserviceaccount.com"
}
}