mirror of
https://github.com/fluxcd/flux2.git
synced 2025-10-28 23:14:48 +08:00
19 lines
512 B
HCL
19 lines
512 B
HCL
data "google_kms_key_ring" "keyring" {
|
|
name = var.gcp_keyring
|
|
location = "global"
|
|
}
|
|
|
|
data "google_kms_crypto_key" "my_crypto_key" {
|
|
name = var.gcp_crypto_key
|
|
key_ring = data.google_kms_key_ring.keyring.id
|
|
}
|
|
|
|
resource "google_kms_key_ring_iam_binding" "key_ring" {
|
|
key_ring_id = data.google_kms_key_ring.keyring.id
|
|
role = "roles/cloudkms.cryptoKeyEncrypterDecrypter"
|
|
|
|
members = [
|
|
"serviceAccount:${data.google_project.project.number}-compute@developer.gserviceaccount.com",
|
|
]
|
|
}
|