-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathexlytics.tf
53 lines (46 loc) · 1.45 KB
/
exlytics.tf
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
resource "google_storage_bucket" "exlytics-storage" {
name = "bueckered-exlytics-storage"
location = "US"
uniform_bucket_level_access = true
}
resource "google_storage_bucket" "exlytics-storage-development" {
name = "bueckered-exlytics-storage-development"
location = "US"
uniform_bucket_level_access = true
}
data "google_iam_policy" "exlytics-storage-iam" {
binding {
role = "roles/storage.admin"
members = [
"user:${var.primary_account_email}"
]
}
binding {
role = "roles/storage.objectCreator"
members = [
"serviceAccount:${module.service-accounts["id"].email}",
]
}
}
data "google_iam_policy" "exlytics-storage-development-iam" {
binding {
role = "roles/storage.admin"
members = [
"user:${var.primary_account_email}"
]
}
binding {
role = "roles/storage.objectCreator"
members = [
"serviceAccount:${module.service-accounts["dev"].email}"
]
}
}
resource "google_storage_bucket_iam_policy" "exlytics-storage-policy" {
bucket = google_storage_bucket.exlytics-storage.name
policy_data = data.google_iam_policy.exlytics-storage-iam.policy_data
}
resource "google_storage_bucket_iam_policy" "exlytics-storage-development-policy" {
bucket = google_storage_bucket.exlytics-storage-development.name
policy_data = data.google_iam_policy.exlytics-storage-development-iam.policy_data
}