ResiLien
/
terraform
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

reorder delegates check

This commit is contained in:
upodroid 2021-04-14 20:34:13 +01:00
parent cc168ec2d6
commit f47db678df
1 changed files with 13 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
backend/remote-state/gcs/backend.go
View File

@ -153,19 +153,9 @@ func (b *Backend) configure(ctx context.Context) error {
// Service Account Impersonation
if v, ok := data.GetOk("impersonate_service_account"); ok {
ServiceAccount := v.(string)
ts, err := impersonate.CredentialsTokenSource(ctx, impersonate.CredentialsConfig{
TargetPrincipal: ServiceAccount,
Scopes: []string{storage.ScopeReadWrite},
}, credOptions...)
if err != nil {
return err
}
opts = append(opts, option.WithTokenSource(ts))
var delegates []string
if v, ok := data.GetOk("impersonate_service_account_delegates"); ok {
var delegates []string
d := v.([]interface{})
if len(delegates) > 0 {
delegates = make([]string, len(d))
@ -173,16 +163,19 @@ func (b *Backend) configure(ctx context.Context) error {
for _, delegate := range d {
delegates = append(delegates, delegate.(string))
}
}
ts, err := impersonate.CredentialsTokenSource(ctx, impersonate.CredentialsConfig{
TargetPrincipal: ServiceAccount,
Scopes: []string{storage.ScopeReadWrite},
Delegates: delegates,
}, credOptions...)
if err != nil {
return err
}
opts = append(opts, option.WithTokenSource(ts))
}
} else {
opts = append(opts, credOptions...)