Set topic iam using variable

Signed-off-by: Alex Co <[email protected]>
mindvalley · Jul 24, 2021 · d7b2f43 · d7b2f43
1 parent 5c2d4bf
commit d7b2f43
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -80,6 +80,14 @@ resource "google_pubsub_subscription_iam_member" "push_subscription_binding" {
   ]
 }
 
+resource "google_pubsub_topic_iam_member" "topic_publisher_sa_binding" {
+  for_each = var.create_topic ? toset(var.allowed_publishers) : []
+  project  = var.project_id
+  topic    = google_pubsub_topic.topic.0.name
+  role     = "roles/pubsub.publisher"
+  member   = each.key
+}
+
 resource "google_pubsub_topic" "topic" {
   count        = var.create_topic ? 1 : 0
   project      = var.project_id

diff --git a/variables.tf b/variables.tf
@@ -30,6 +30,12 @@ variable "create_topic" {
   default     = true
 }
 
+variable "allowed_publishers" {
+  type        = list(string)
+  description = "The list of allowed publishers"
+  default     = []
+}
+
 variable "topic_labels" {
   type        = map(string)
   description = "A map of labels to assign to the Pub/Sub topic"