Skip to content

Latest commit

 

History

History
57 lines (46 loc) · 4.75 KB

docs.md

File metadata and controls

57 lines (46 loc) · 4.75 KB
Raw

Requirements

Name Version
terraform ~>1.0
github ~>5.0
google ~>4.60
random ~>3.4

Providers

Name Version
github 5.21.1
google 4.60.2
random ~>3.4

Modules

Name Source Version
gh_oidc terraform-google-modules/github-actions-runners/google//modules/gh-oidc ~> 3.1
iam_member_roles terraform-google-modules/iam/google//modules/member_iam ~> 7.5
service_accounts terraform-google-modules/service-accounts/google ~> 3.0

Resources

Name Type
github_actions_environment_secret.project_id resource
github_actions_environment_secret.service_account resource
github_actions_environment_secret.workload_identity_provider resource
github_repository_environment.repo_environment resource
random_string.random_id resource
random_string.unique_sa_name resource
github_repository.repo data source
google_service_account.lookup data source

Inputs

Name Description Type Default Required
audience_name The value is the audience name for the GitHub OIDC provider. string "google-wlif" no
default_tags The value is a map of default tags to assign to the resource. map(string) 
{
  "CreatedBy": "Terraform"
}
 no
environment value is the environment for the resources created. string n/a yes
github_issuer_url value is the issuer URL for the GitHub OIDC provider. string "https://token.actions.githubusercontent.com" no
name_prefix The value is a prefix for the name of the resources created. string n/a yes
override_subject_template_path set this to override the default subject template for the workload identity subject. string null no
owners List of object IDs of the application owners. list(string) null no
repositories List of repositories and their respective environments for which to create secrets and configure permissions. 
list(object({
    repository_name = string
    environments = list(object({
      environment   = string
      name_prefix   = string
      sa_email      = optional(string)
      project_id    = optional(string)
      tags          = optional(map(string))
      project_roles = list(string)
    }))
  }))
 n/a yes
user_defined_tags The value is a map of tags to assign to the resource. map(string) {} no

Outputs

Name Description
github_repository_environments Information about the created GitHub repository environments.