All Modules
GCPSecurity
Workload Identity
GKE Workload Identity binding between K8s and Google service accounts
Usage
module "workload_identity" {
source = "github.com/fencepencil/gcp-modules//workload-identity"
project_id = "<project_id>"
service_account_id = "<service_account_id>"
namespace = "<namespace>"
k8s_service_account = "<k8s_service_account>"
tags = var.tags
}Inputs (5)
| Name | Type | Description | Default | Required |
|---|---|---|---|---|
project_id | string | GCP project ID | — | yes |
service_account_id | string | Google service account ID | — | yes |
namespace | string | Kubernetes namespace | — | yes |
k8s_service_account | string | K8s service account name | — | yes |
roles | list(string) | IAM roles to grant | [] | no |
Outputs (2)
| Name | Description |
|---|---|
service_account_email | Service account email |
service_account_name | Service account full name |