public/terraform-provider-google
0
0
Fork 0
mirror of https://github.com/letic/terraform-provider-google.git synced 2024-07-08 19:18:30 +00:00
Code Issues Projects Releases Wiki Activity

Add example usage and better description of private_key attribute of google_service_account_key. (#1047)

Browse Source
This commit is contained in:
Anders Bruun Olsen 2018-02-05 19:46:27 +01:00 committed by Vincent Roseberry
parent 4fa2796c17
commit 9ee952af16
1 changed files with 23 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
website/docs/r/google_service_account_key.html.markdown
View File

@ -25,6 +25,26 @@ resource "google_service_account_key" "acceptance" {
}
```
## Example Usage, save key in Kubernetes secret
```hcl
resource "google_service_account" "myaccount" {
account_id = "myaccount"
display_name = "My Service Account"
}
resource "google_service_account_key" "mykey" {
service_account_id = "${google_service_account.myaccount.id}"
}
resource "kubernetes_secret" "google-application-credentials" {
metadata {
name = "google-application-credentials"
}
data {
credentials.json = "${base64decode(google_service_account_key.mykey.private_key)}"
}
}
```
## Create new Key Pair, encrypting the private key with a PGP Key
```hcl
@ -71,8 +91,9 @@ The following attributes are exported in addition to the arguments listed above:
* `public_key` - The public key, base64 encoded
* `private_key` - The private key, base64 encoded. This is only populated
when creating a new key, and when no `pgp_key` is provided
* `private_key` - The private key in JSON format, base64 encoded. This is what you normally get as a file when creating
service account keys through the CLI or web console. This is only populated when creating a new key, and when no
`pgp_key` is provided.
* `private_key_encrypted` – The private key material, base 64 encoded and
encrypted with the given `pgp_key`. This is only populated when creating a new