google_gke_hub_membership_rbac_role_binding

RBACRoleBinding represents a rbacrolebinding across the Fleet.

To get more information about MembershipRBACRoleBinding, see:

Example Usage - Gkehub Membership Rbac Role Binding Basic

resource "google_container_cluster" "primary" {
  provider = google-beta
  name               = "basic-cluster"
  location           = "us-central1-a"
  initial_node_count = 1
  deletion_protection  = "true"
  network       = "default"
  subnetwork    = "default"
}

resource "google_gke_hub_membership" "membership" {
  provider = google-beta
  membership_id = "tf-test-membership%{random_suffix}"
  endpoint {
    gke_cluster {
      resource_link = "//container.googleapis.com/${google_container_cluster.primary.id}"
    }
  }

  depends_on = [google_container_cluster.primary]
}

resource "google_gke_hub_membership_rbac_role_binding" "membership_rbac_role_binding" {
  provider = google-beta
  membership_rbac_role_binding_id = "tf-test-membership-rbac-role-binding%{random_suffix}"
  membership_id = google_gke_hub_membership.membership.membership_id
  user = "service-${data.google_project.project.number}@gcp-sa-anthossupport.iam.gserviceaccount.com"
  role {
    predefined_role = "ANTHOS_SUPPORT"
  }
  location = "global"
  depends_on = [google_gke_hub_membership.membership]
}

data "google_project" "project" {
  provider = google-beta
}

Argument Reference

The following arguments are supported:

The role block supports:


Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

The state block contains:

Timeouts

This resource provides the following Timeouts configuration options:

Import

MembershipRBACRoleBinding can be imported using any of these accepted formats:

In Terraform v1.5.0 and later, use an import block to import MembershipRBACRoleBinding using one of the formats above. For example:

import {
  id = "projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}/rbacrolebindings/{{membership_rbac_role_binding_id}}"
  to = google_gke_hub_membership_rbac_role_binding.default
}

When using the terraform import command, MembershipRBACRoleBinding can be imported using one of the formats above. For example:

$ terraform import google_gke_hub_membership_rbac_role_binding.default projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}/rbacrolebindings/{{membership_rbac_role_binding_id}}
$ terraform import google_gke_hub_membership_rbac_role_binding.default {{project}}/{{location}}/{{membership_id}}/{{membership_rbac_role_binding_id}}
$ terraform import google_gke_hub_membership_rbac_role_binding.default {{location}}/{{membership_id}}/{{membership_rbac_role_binding_id}}

User Project Overrides

This resource supports User Project Overrides.