terraform-provider-stackgen

sg_vault_gcp_config (Data Source)

Fetches service-account impersonation setup values from Vault GET /integration/gcp/config for the current workspace. Grant roles/iam.serviceAccountTokenCreator on your customer service account to bastion_service_account_email. The customer service account email, not the bastion email, belongs on your sg_secret.

Example Usage

# Scoped to provider workspace_id when org_id is omitted.
# Grant Token Creator on YOUR customer service account to the bastion principal;
# do not put the bastion email into an sg_secret as the customer account.
# WARNING: If credentials are later added to sg_secret, they remain in
# Terraform state; use an encrypted, access-controlled state backend.
data "sg_vault_gcp_config" "workspace" {}

output "stackgen_bastion_service_account" {
  value = data.sg_vault_gcp_config.workspace.bastion_service_account_email
}

Schema

Optional

Read-Only