ITQ/yandexcloud-k3s
1
0
Fork 0
mirror of https://github.com/devitq/yandexcloud-k3s.git synced 2026-09-20 21:40:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore(terraform): refactored configuration

Browse Source
This commit is contained in:
ITQ
2025-10-31 15:12:35 +03:00
parent 8351a2c667
commit 804444ab74
18 changed files with 143 additions and 171 deletions
Download Patch File Download Diff File Expand all files Collapse all files
main/iam.tf
+9 -9
View File
@@ -29,29 +29,29 @@ resource "yandex_iam_service_account_iam_binding" "instance_group_vm_sa_admin" {
]
}
resource "yandex_iam_service_account" "master_vm_sa" {
name = "master-vm-sa"
resource "yandex_iam_service_account" "k8s_main_master_vm_sa" {
name = "k8s-master-vm-sa"
description = "Service account for master vm"
}
resource "yandex_compute_instance_iam_binding" "master_vm_sa_editor" {
instance_id = yandex_compute_instance.master.id
resource "yandex_compute_instance_iam_binding" "k8s_main_master_vm_sa_editor" {
instance_id = yandex_compute_instance.k8s_main_master.id
role = "editor"
members = [
"serviceAccount:${yandex_iam_service_account.master_vm_sa.id}"
"serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
]
}
resource "yandex_resourcemanager_folder_iam_member" "master_vm_sa_viewer" {
resource "yandex_resourcemanager_folder_iam_member" "k8s_main_master_vm_sa_viewer" {
folder_id = var.folder_id
role = "compute.viewer"
member = "serviceAccount:${yandex_iam_service_account.master_vm_sa.id}"
member = "serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
}
resource "yandex_resourcemanager_folder_iam_member" "master_vm_sa_oslogin" {
resource "yandex_resourcemanager_folder_iam_member" "k8s_main_master_vm_sa_oslogin" {
folder_id = var.folder_id
role = "compute.osAdminLogin"
member = "serviceAccount:${yandex_iam_service_account.master_vm_sa.id}"
member = "serviceAccount:${yandex_iam_service_account.k8s_main_master_vm_sa.id}"
}
resource "yandex_iam_service_account" "registry_push_sa" {