search

exekube / exekube

Exekube is a framework for managing the whole lifecycle of Kubernetes-based projects as declarative code with Terraform and Helm
Apache License 2.0
44 stars 16 forks source link

Establish a workflow for managing employees, service accounts, credentials #3

Open ilyasotkov opened 6 years ago

ilyasotkov commented 6 years ago

The workflow for granting access to an employee should be well-established and secure.

Read this article about GCP Service Accounts and credentials for them: https://cloud.google.com/iam/docs/understanding-service-accounts

ilyasotkov commented 6 years ago

This is a good overview of how IAM works on GCP: https://cloud.google.com/iam/docs/overview

ilyasotkov commented 6 years ago

https://github.com/ilyasotkov/exekube/issues/8

ilyasotkov commented 6 years ago

We already have this file https://github.com/ilyasotkov/exekube/blob/develop/live/infra/gcp-ethereal-argon/access.tf for testing out GCP IAM and policy resources, but it doesn't do anything useful yet.