Hi there, Terraform v0.12.18 provider.google v3.4.0 provider.google-beta v3.4.0 I am trying to create several service accounts and map them to multiple roles in GCP. I’m having an issue getting my second loop to be honored (if that’s possible). variable "roles_for_admins" { default = { "…

Hi @thedarkwriter , It sounds like what you need here is to have one google_project_iam_member object for every unique combination of elements from var.roles_for_admins and var.admins. Terraform’s setproduct function is useful for this sort of use-case, and its documentation includes an example usi…

Hey @apparentlymart , thanks so much for the help. It doesn’t quite go through, I’m getting a similar error as last time Error: Invalid template interpolation value on ../../modules/infrastructure/modules/auth/service_account_roles.tf line 21, in locals: 21: account = "serviceAccount:${g…

Oh, whoops! Sorry, I made an editorial error when I was writing that part and forgot to include the attribute name: account = "serviceAccount:${google_service_account.create-serviceaccounts[pair[0]].email}" Notice that it now has .email on the end of that reference to google_service_account.…

As you explained it, it makes total sense why that would work, but something still isn’t right. I’ve tried mucking with the config for a while but I’m not getting a good result. If I put in what you recommend: account = "serviceAccount:${google_service_account.terraform-admins[pair[0]].email}" I …

Hi @thedarkwriter ! I’m afraid my weak knowledge of GCP is causing me to guess a bit and to be unable to test directly, and it looks like I got some of the details wrong. Perhaps it’d be better to take a step back and talk about the concepts involved in that example rather than me just continuing t…

Hey @apparentlymart , You’ve really helped me here, I totally appreciate it. With your guidance I was able to get this working and found that my errors were a bit sneakier than I realized. Once I got this config in (I’ll share below), I realized that I was getting errors creating the local.admin_rol…

Ahh, yes… I didn’t consider that this email argument would be decided during apply and thus isn’t a good key to use in for_each. If you’d like to spend a little more time smoothing that out, the important pattern is to write i so that the names you’ve chosen in the configuration are what are used i…

Having difficulty using two different for loops in the same resource

Terraform

Topic		Replies	Views
How to generate a map to use with for_each Terraform	2	1245	October 15, 2021
"Invalid reference" for app-gen-eng-sandbox reference Terraform	2	558	April 25, 2022
Unable to associate multiple iam user with the custom iam role in gcp Terraform	8	1552	July 21, 2022
The "for_each" value depends on resource attributes that cannot be determined until apply Terraform	7	29184	June 8, 2023
Nested loops with terraform Terraform	1	1041	December 14, 2021

Having difficulty using two different for loops in the same resource

Related topics