This optional module is used to assign artifact registry repository iam roles.
module "artifact-registry-repository-iam-bindings" {
source = "terraform-google-modules/iam/google//modules/artifact_registry_iam"
version = "~> 8.0"
project = "my-project"
repositories = ["my-project_one", "my-project_two"]
location = "us-central1"
mode = "additive"
bindings = {
"roles/artifactregistry.writer" = [
"serviceAccount:my-sa@my-project.iam.gserviceaccount.com",
"group:my-group@my-org.com",
"user:my-user@my-org.com",
]
}
}
Name | Description | Type | Default | Required |
---|---|---|---|---|
bindings | Map of role (key) and list of members (value) to add the IAM policies/bindings | map(list(string)) |
{} |
no |
location | Location of the provided artifact registry repositories | string |
n/a | yes |
mode | Mode for adding the IAM policies/bindings, additive and authoritative | string |
"additive" |
no |
project | Project where the artifact registry repositories are placed | string |
n/a | yes |
repositories | Artifact registry repositories list to add the IAM policies/bindings | list(string) |
[] |
no |
Name | Description |
---|---|
members | Members which were bound to artifact registry repositories. |
repositories | Artifact registry repositories which received bindings. |
roles | Roles which were assigned to members. |