26dbaa2d6e
* Draft terraform_naming_convention * Two fast/stages fixes for terraform_naming_convention * Disable terraform_naming_convention for resources for now * module fixes for terraform_naming_convention * tfdoc * Remove "moved" from recipe and needs-fixing * Fix moved for spoke_ra * fix tests * Use default (snake_case) for resources * factory.terraform_data.project-preconditions * First-pass migration of resources + tests * Fix tests/modules/organization * Require snake_case for variables; Add annotations for _testing * permit _fast_debug variable * Fix net_vpc_factory and net_vpc_firewall tests * tfdoc addons and recipe * Fix more tests * Fix some net-global -> net_global tests --------- Co-authored-by: Ludovico Magnocavallo <ludomagno@google.com>
49 lines
1.4 KiB
HCL
49 lines
1.4 KiB
HCL
/**
|
|
* Copyright 2025 Google LLC
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
locals {
|
|
command_tpl = <<EOT
|
|
curl -v -H "Authorization: Bearer $(gcloud auth print-identity-token \
|
|
--audiences $${aud} \
|
|
--impersonate-service-account $${sa} \
|
|
--include-email)" $${url}
|
|
EOT
|
|
}
|
|
|
|
output "application_service_account_email" {
|
|
description = "Application service account email."
|
|
value = module.application-service-account.email
|
|
}
|
|
|
|
output "command" {
|
|
description = "Command."
|
|
value = templatestring(local.command_tpl, {
|
|
aud = google_iap_client.iap_client.client_id
|
|
sa = module.application-service-account.email
|
|
url = local.url
|
|
})
|
|
}
|
|
|
|
output "oauth2_client_id" {
|
|
description = "OAuth client ID."
|
|
value = google_iap_client.iap_client.client_id
|
|
}
|
|
|
|
output "url" {
|
|
description = "URL to access service exposed by IAP."
|
|
value = local.url
|
|
}
|