This Terraform module enables you to configure Terraform Cloud as an GCP IAM OIDC identity provider in GCP, which enables Terraform Cloud to access resources within an GCP Projects(s) without requiring long-lived credentials to be stored as Terraform Cloud Variables.

• GCP Project(s) and credentials
• Terraform Cloud Account(s)
• Git repository integration with Terraform Cloud
• Terraform >= 1.x
• Profit?

provider "google" {
  region  = var.region
  project = var.project_id
}

provider "google-beta" {
  region  = var.region
  project = var.project_id
}

module "terraform_cloud" {
  source  = "saidsef/terraform-cloud-oidc/gcp"
  version = ">= 1"

  organisation     = "saidsef"
  projects         = [{ "project" : "platform", "workspaces" : "dev" }]
}

Please see TERRAFORM.md and Terraform token specification

After you have create a workspace, navigate to the Variables page and add the following variables:

NOTE: You can undelete a provider for up to 30 days after deletion. After 30 days, deletion is permanent. Until a provider is permanently deleted, you cannot reuse its name when creating a new provider.

Please see TERRAFORM.md

Our latest and greatest source of terraform-gcp-terraform-cloud-oidc can be found on GitHub. Fork us!

We would ❤️ you to contribute by making a pull request.

Please read the official Contribution Guide for more information on how you can contribute.

• Terraform Pool Provider
• Terraform Attribute Maping
• Terraform Token Specification
• GCP Configuration