https://github.com/rad-security/terraform-google-gcr-scraper
A terraform module for allowing Rad Security to scan GCR registries in your GCP account.
https://github.com/rad-security/terraform-google-gcr-scraper
Last synced: 12 days ago
JSON representation
A terraform module for allowing Rad Security to scan GCR registries in your GCP account.
- Host: GitHub
- URL: https://github.com/rad-security/terraform-google-gcr-scraper
- Owner: rad-security
- Created: 2024-12-20T12:42:08.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2025-01-07T13:53:37.000Z (over 1 year ago)
- Last Synced: 2026-06-03T15:13:59.144Z (20 days ago)
- Language: HCL
- Homepage:
- Size: 5.86 KB
- Stars: 0
- Watchers: 5
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# terraform-google-gcr-scraper
A terraform module for allowing Rad Security to scan GCR registries in your GCP account.
## Terraform Registry
This module is available in the [Terraform Registry](https://registry.terraform.io/) see [here](https://registry.terraform.io/modules/rad-security/gcr-scraper/google/latest).
## Contributing
The most important thing to be aware of when contributing is that we leverage the [Semantic Release Action](https://github.com/cycjimmy/semantic-release-action) to automate our changelog, see [here](CHANGELOG.md).
This requires us to use [conventional git commits](https://www.conventionalcommits.org/en/v1.0.0/) when committing to this repository.
Each PR merge into the `main` branch will execute the release process defined [here](.github/workflows/release.yml).
## Usage
This module needs a Google provider to be configured. It will create an IAM Service Account in your project called `rad-security-gcr-scraper` and IAM Role. The IAM Role has fine-grained policies attached, which will allow the `imagescan-scraper` role in Rad Security's AWS account to assume the permissions necessary to interact with GCR resources in your account.
## Requirements
| Name | Version |
|------|---------|
| [terraform](#requirement\_terraform) | >= 1.0.8 |
## Providers
| Name | Version |
|------|---------|
| [google](#provider\_google) | n/a |
## Modules
No modules.
## Resources
| Name | Type |
|------|------|
| [google_iam_workload_identity_pool.rad_security_gcr_identity_pool](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/iam_workload_identity_pool) | resource |
| [google_iam_workload_identity_pool_provider.rad_aws_provider](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/iam_workload_identity_pool_provider) | resource |
| [google_project_iam_binding.rad_gcr_scraper_access](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_binding) | resource |
| [google_project_iam_custom_role.rad_gcr_scraper](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_custom_role) | resource |
| [google_service_account.rad_gcr_scraper](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/service_account) | resource |
| [google_service_account_iam_binding.rad_workload_identity_user](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/service_account_iam_binding) | resource |
| [google_project.current](https://registry.terraform.io/providers/hashicorp/google/latest/docs/data-sources/project) | data source |
## Inputs
| Name | Description | Type | Default | Required |
|------|-------------|------|---------|:--------:|
| [aws\_account\_id](#input\_aws\_account\_id) | RAD Security's AWS account ID to authenticate with your Google Cloud project | `string` | `"955322216602"` | no |
| [aws\_role\_name](#input\_aws\_role\_name) | RAD Security's AWS Role Name to authenticate with your Google Cloud project | `string` | `"imagescan-scraper"` | no |
| [gcp\_project\_name](#input\_gcp\_project\_name) | GCP project name (optional - will use current project name if not specified) | `string` | `null` | no |
## Outputs
No outputs.
## License
Apache 2 Licensed. See [LICENSE](LICENSE) for full details.