feat: Add impersonate_service_account to shared_vpc module to pass to…

… core_project_factory (#477)
terraform-google-modules · Oct 11, 2020 · e9f0c8f · e9f0c8f
1 parent 05d1465
commit e9f0c8f
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 0 deletions.
diff --git a/modules/shared_vpc/main.tf b/modules/shared_vpc/main.tf
@@ -46,6 +46,7 @@ module "project-factory" {
   usage_bucket_prefix               = var.usage_bucket_prefix
   bucket_versioning                 = var.bucket_versioning
   credentials_path                  = var.credentials_path
+  impersonate_service_account       = var.impersonate_service_account
   shared_vpc_subnets                = var.shared_vpc_subnets
   labels                            = var.labels
   bucket_project                    = var.bucket_project

diff --git a/modules/shared_vpc/variables.tf b/modules/shared_vpc/variables.tf
@@ -99,6 +99,12 @@ variable "credentials_path" {
   default     = ""
 }
 
+variable "impersonate_service_account" {
+  description = "An optional service account to impersonate. This cannot be used with credentials_path. If this service account is not specified and credentials_path is absent, the module will use Application Default Credentials."
+  type        = string
+  default     = ""
+}
+
 variable "shared_vpc_subnets" {
   description = "List of subnets fully qualified subnet IDs (ie. projects/$project_id/regions/$region/subnetworks/$subnet_id)"
   type        = list(string)