zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Avoid data sources in in gcs-to-bq-with-dataflow example

This commit is contained in:
Julio Castillo 2021-02-15 18:15:20 +01:00
parent fcc8f976bd
commit a3e8f5391b
1 changed files with 10 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
data-solutions/gcs-to-bq-with-dataflow/main.tf
View File

@ -100,13 +100,13 @@ module "service-account-df" {
} }
} }
data "google_bigquery_default_service_account" "bq_sa" { # data "google_bigquery_default_service_account" "bq_sa" {
project = module.project-service.project_id # project = module.project-service.project_id
} # }
data "google_storage_project_service_account" "gcs_account" { # data "google_storage_project_service_account" "gcs_account" {
project = module.project-service.project_id # project = module.project-service.project_id
} # }
############################################################################### ###############################################################################
# KMS # # KMS #
@ -128,15 +128,14 @@ module "kms" {
}, },
key-gcs = { key-gcs = {
"roles/cloudkms.cryptoKeyEncrypterDecrypter" = [ "roles/cloudkms.cryptoKeyEncrypterDecrypter" = [
#"serviceAccount:${module.project-service.service_accounts.robots.storage}", "serviceAccount:${module.project-service.service_accounts.robots.storage}",
"serviceAccount:${data.google_storage_project_service_account.gcs_account.email_address}" #"serviceAccount:${data.google_storage_project_service_account.gcs_account.email_address}"
] ]
}, },
key-bq = { key-bq = {
"roles/cloudkms.cryptoKeyEncrypterDecrypter" = [ "roles/cloudkms.cryptoKeyEncrypterDecrypter" = [
# TODO: Find a better place to store BQ service account "serviceAccount:${module.project-service.service_accounts.default.bq}",
#"serviceAccount:${module.project-service.service_accounts.default.bq}", #"serviceAccount:${data.google_bigquery_default_service_account.bq_sa.email}",
"serviceAccount:${data.google_bigquery_default_service_account.bq_sa.email}",
] ]
}, },
} }