set default autoscaling service_account to not be 'default' (#801)

* set default service_account to not be 'default' Signed-off-by: Bob Callaway <[email protected]> * remove = Signed-off-by: Bob Callaway <[email protected]> --------- Signed-off-by: Bob Callaway <[email protected]>
sigstore · Oct 26, 2023 · 9eb31e2 · 9eb31e2
1 parent 184dc62
commit 9eb31e2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/terraform/gcp/modules/gke_cluster/cluster.tf b/terraform/gcp/modules/gke_cluster/cluster.tf
@@ -128,6 +128,10 @@ resource "google_container_cluster" "cluster" {
     autoscaling_profile = var.cluster_autoscaling_profile
     enabled             = var.cluster_autoscaling_enabled
 
+    auto_provisioning_defaults {
+      service_account = google_service_account.gke-sa.email
+    }
+
     resource_limits {
       resource_type = "cpu"
       minimum       = var.resource_limits_resource_cpu_min