terraform-google-modules/terraform-google-bastion-host

Pull out IAP config into submodule

onetwopunch opened this issue · 1 comments

onetwopunch commented

To allow for a greater value to VMs that are not qualified as bastion hosts, we should pull out the IAP components into their own submodules. The pieces that should be pull out are:

  • Firewall rule (Also add the ability to specify target tags as opposed to service account to be more useful outside of this module).
  • Tunnel IAM bindings
xingao267 commented

Thanks for opening the issue @onetwopunch. I'll take a stab at implementing this.

  • 👍1