Skip to main content

tharsis_workspace_role_binding

Defines and manages a workspace role binding.

Example Usage​

resource "tharsis_workspace_role_binding" "wrb" {
  workspace_id = tharsis_workspace.this.id
  role_name    = "deployer"
}

Behavior​

  • A workspace role binding confers a role on a workspace. The role's permissions become available to the workspace's job caller at the workspace's direct parent group and its descendants.
  • A job is read-only by default. Create a workspace role binding to allow the workspace's jobs to create or change resources, such as with this provider running inside a Tharsis job.
  • The role is limited to what the role itself permits. Choose the least privileged role that covers what the job needs to do.
  • role_name can be changed in place. Changing workspace_id replaces the role binding.

Schema​

Required​

  • role_name (String) The name of the role bound to the workspace.
  • workspace_id (String) The ID or TRN of the workspace this role binding applies to.

Read-Only​

  • id (String) String identifier of the workspace role binding.