Skip to content

Commit fb180df

Browse files
Update IAM template docs to cover WIF principals (#15131)
Co-authored-by: Riley Karson <[email protected]>
1 parent 15470c4 commit fb180df

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

mmv1/templates/terraform/resource_iam.html.markdown.tmpl

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -230,6 +230,7 @@ The following arguments are supported:
230230
* **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
231231
* **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
232232
* **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
233+
* **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/[email protected]"
233234

234235
* `role` - (Required) The role that should be applied. Only one
235236
`{{ $.IamTerraformName }}_binding` can be used per role. Note that custom roles must be of the format

0 commit comments

Comments
 (0)