#90s #blog #gitlab

gcs.tf

resource "google_storage_bucket" "gitlab_runner" {
  name     = "${local.name}-cache"
}

resource "google_storage_bucket_iam_binding" "gitlab_runner" {
  bucket   = "${google_storage_bucket.gitlab_runner.name}"
  role     = "roles/storage.objectAdmin"

  members = [
    "serviceAccount:${google_service_account.gke.email}",
  ]
}

resource "google_service_account" "gke" {
  account_id   = "<accout-name>"
  display_name = "service account to access gcs bucket"
}