sue445/terraform-gcp-template

Create all resources required to run Terraform with Deployment Manager

Opened this issue · 0 comments

Deployment Manager doesn't currently supports Workload Identity Pool.

Therefore, these are created by Terraform.

resource "google_iam_workload_identity_pool" "github_actions" {
provider = google-beta
workload_identity_pool_id = "github-actions"
}
resource "google_iam_workload_identity_pool_provider" "github_actions" {
provider = google-beta
workload_identity_pool_id = google_iam_workload_identity_pool.github_actions.workload_identity_pool_id
workload_identity_pool_provider_id = "github-actions"
attribute_mapping = {
"google.subject" = "assertion.sub"
"attribute.repository" = "assertion.repository"
}
oidc {
issuer_uri = "https://token.actions.githubusercontent.com"
}
}

But if possible, I would like to create these with Deployment Manager as well.