gke-iam

castai/gke-iam/castai

Terraform Module HCL CASTAI

CAST AI terraform module for GCP GKE IAM

Install

module "gke-iam" {

source = "castai/gke-iam/castai"

version = "0.5.0"

}

plain text: /constructs/tfmod-castai-gke-iam-castai/install.txt

⭐ Source on GitHub 📦 Registry page

README

Terraform module for creating GCP IAM resources required to connect GKE with CAST AI. ================== Website: https://www.cast.ai Requirements ------------ - Terraform 0.13+ Using the module ------------ ``hcl module "castai_gke_iam" { source = "castai/gke-iam/castai" project_id = var.project_id gke_cluster_name = var.cluster_name } `` Examples Usage examples are located in terraform provider repo Requirements | Name | Version | |------|---------| | terraform | >= 0.13 | | castai | >= 5.1.0 | | google | >= 2.49 | Providers | Name | Version | |------|---------| | castai | >= 5.1.0 | | google | >= 2.49 | Modules No modules. Resources | Name | Type | |------|------| | google_project_iam_binding.compute_manager_binding | resource | | google_project_iam_custom_role.castai_role | resource |

Inputs (11)

Name	Type	Description	Default
gke_cluster_name	string	GKE cluster name for which to create IAM roles	required
project_id	string	The project id from GCP	required
service_accounts_unique_ids	list(string)	Service Accounts' unique IDs used by node pools in the cluster	`[]`
create_service_account	bool	Whether an Service Account with private key should be created	`true`
workload_identity_namespace	string	Override workload identity namespace, default is <project-id>.svc.id.goog	`""`
cloud_proxy_service_account_namespace	string	Namespace of the cloud-proxy Kubernetes Service Account	`"castai-agent"`
compute_manager_permissions	list(string)	A set of permissions that will be granted to compute manager role	`[]`
compute_manager_project_ids	list(string)	Projects list for shared sole tenancy nodes	`[]`
setup_cloud_proxy_workload_identity	bool	Whether the workload identity for castai-cloud-proxy should be setup	`false`
cloud_proxy_service_account_name	string	Name of the cloud-proxy Kubernetes Service Account	`"castai-cloud-proxy"`
castai_role_permissions	list(string)	A set of permissions that will be granted to CAST AI role used by central system	`[]`