flat-lifeguard-28406
10/03/2024, 1:00 PMdata "rancher2_principal" "developers" {
type = "group"
name = "<mailto:developer-group@domain.com|developer-group@domain.com>"
}
resource "rancher2_cluster_role_template_binding" "this" {
name = "developers"
cluster_id = rancher2_cluster_v2.this.cluster_v1_id
role_template_id = "cluster-admin"
group_principal_id = data.rancher2_principal.developers.id
}
This group is a GCP group and I am trying to run this terraform using jenkins and credentials for jenkins.
If I have a local jenkins account with an API key for the provider credentials the group lookup fails. On the other hand if I login with my GCP account to rancher and use my own personal API key the group lookup works. What am I missing here?
Can I give a local account permission to see GCP groups? If not is there a way to have a GCP service account access the rancher API?