WIP

.github/workflows/bootstrap.yml

@@ -1,4 +1,4 @@
-name: Apply
+name: Bootstrap setup
 
 on:
   workflow_dispatch:

.gitignore

@@ -38,3 +38,4 @@ key-file.json
 *.state
 variable-defaults.tfvars
 scripts/local.sh
+defaults.auto.tfvars

bodleian/backend-runtime-sa.tf

@@ -17,14 +17,14 @@ resource "google_project_iam_member" "bodleian_backend_service_iam_binding" {
   member  = "serviceAccount:${google_service_account.backend_service_sa.email}"
 }
 
-resource "google_service_account_iam_member" "backend_service_sa_user_iam_binding_serviceaccountuser" {
+resource "google_service_account_iam_member" "deployer_serviceaccountuser" {
   service_account_id = google_service_account.backend_service_sa.name
   role               = "roles/iam.serviceAccountUser"
 
   member = "serviceAccount:${google_service_account.backend_deployer_sa.email}"
 }
 
-resource "google_service_account_iam_member" "backend_service_sa_user_iam_binding_serviceaccountuser" {
+resource "google_service_account_iam_member" "infrastructure_serviceaccountuser" {
   service_account_id = google_service_account.backend_service_sa.name
   role               = "roles/iam.serviceAccountUser"
 

scripts/local-init.sh

@@ -17,7 +17,7 @@ gcloud config set project koenighotze-seed-398addce
 # gcloud auth application-default login
 
 if bucket_exists "$SEED_PROJECT"; then
-    terraform init -backend-config="bucket=$SEED_PROJECT"
+    terraform init -backend-config="bucket=$SEED_PROJECT" $*
 else
     echo "Missing bucket '$SEED_PROJECT'; cannot initialize backend"
     exit 1 

versions.tf

@@ -15,5 +15,10 @@ terraform {
       source  = "integrations/github"
       version = ">= 4.0"
     }
+
+    random = {
+      source  = "hashicorp/random"
+      version = "~> 3.6.0"
+    }
   }
 }