back to principalSet.

SchmidtDSE · Dec 31, 2023 · 371f856 · 371f856
1 parent 14a2fa7
commit 371f856
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 7 deletions.
diff --git a/main.tf b/main.tf
@@ -118,6 +118,6 @@ resource "google_service_account_iam_binding" "workload_identity_user" {
   service_account_id = google_service_account.default.name
   role               = "roles/iam.workloadIdentityUser"
   members            = [
-    "serviceAccount:${google_service_account.default.email}"
+    "principalSet://iam.googleapis.com/projects/${data.google_project.project.number}/locations/global/workloadIdentityPools/${google_iam_workload_identity_pool.pool.workload_identity_pool_id}/attribute.repository/burn-severity-mapping-poc"
   ]
 }
diff --git a/terraform.tfstate b/terraform.tfstate
@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.6.0",
-  "serial": 56,
+  "serial": 58,
   "lineage": "44075ebe-b91a-1e72-3b17-affdfb63c0f1",
   "outputs": {},
   "resources": [
@@ -400,17 +400,19 @@
           "schema_version": 0,
           "attributes": {
             "condition": [],
-            "etag": "BwYMzVAjNrY=",
+            "etag": "BwYNxENC/ts=",
             "id": "projects/dse-nps/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser",
             "members": [
-              "serviceAccount:github-actions-service-account@dse-nps.iam.gserviceaccount.com"
+              "principalSet://iam.googleapis.com/projects/113009620257/locations/global/workloadIdentityPools/github/attribute.repository/burn-severity-mapping-poc"
             ],
             "role": "roles/iam.workloadIdentityUser",
             "service_account_id": "projects/dse-nps/serviceAccounts/[email protected]"
           },
           "sensitive_attributes": [],
           "private": "bnVsbA==",
           "dependencies": [
+            "data.google_project.project",
+            "google_iam_workload_identity_pool.pool",
             "google_service_account.default"
           ]
         }

diff --git a/terraform.tfstate.backup b/terraform.tfstate.backup
@@ -1,7 +1,7 @@
 {
   "version": 4,
   "terraform_version": "1.6.0",
-  "serial": 55,
+  "serial": 56,
   "lineage": "44075ebe-b91a-1e72-3b17-affdfb63c0f1",
   "outputs": {},
   "resources": [
@@ -403,15 +403,14 @@
             "etag": "BwYMzVAjNrY=",
             "id": "projects/dse-nps/serviceAccounts/[email protected]/roles/iam.workloadIdentityUser",
             "members": [
-              "principalSet://iam.googleapis.com/projects/dse-nps/locations/global/workloadIdentityPools/github/attribute.repository"
+              "serviceAccount:github-actions-service-account@dse-nps.iam.gserviceaccount.com"
             ],
             "role": "roles/iam.workloadIdentityUser",
             "service_account_id": "projects/dse-nps/serviceAccounts/[email protected]"
           },
           "sensitive_attributes": [],
           "private": "bnVsbA==",
           "dependencies": [
-            "google_iam_workload_identity_pool.pool",
             "google_service_account.default"
           ]
         }