mirror of
https://github.com/google/nomulus.git
synced 2025-05-01 04:27:51 +02:00
520145f641
* Move terraform and kubernetes folder to be under proxy There is no reason for them to be under proxy/src/... any more now that we have a Gradle-idiomatic folder structure.
15 lines
519 B
HCL
15 lines
519 B
HCL
resource "google_kms_key_ring" "proxy_key_ring" {
|
|
name = "${var.proxy_key_ring}"
|
|
location = "global"
|
|
}
|
|
|
|
resource "google_kms_crypto_key" "proxy_key" {
|
|
name = "${var.proxy_key}"
|
|
key_ring = "${google_kms_key_ring.proxy_key_ring.id}"
|
|
}
|
|
|
|
resource "google_kms_crypto_key_iam_member" "ssl_key_decrypter" {
|
|
crypto_key_id = "${google_kms_crypto_key.proxy_key.id}"
|
|
role = "roles/cloudkms.cryptoKeyDecrypter"
|
|
member = "serviceAccount:${google_service_account.proxy_service_account.email}"
|
|
}
|