Deno script for impersonating STM SA

tfsa.ts

#!/usr/bin/env -S deno run --allow-net --allow-read --allow-run
let tfVars: string;

try {
  tfVars = Deno.readTextFileSync("./environments/STM.tfvars");
} catch (error) {
  console.error(error);
  Deno.exit(1);
}

const projectId = tfVars.match(/project_id\s+=\s+"(?<project_id>.+?)"/)?.groups
  ?.project_id;

if (!projectId) {
  console.error("Project ID not found");
  Deno.exit(2);
}

const tokenOutput = await Deno.run({
  cmd: [
    "gcloud",
    "--impersonate-service-account=terraform@" +
      projectId +
      ".iam.gserviceaccount.com",
    "auth",
    "print-access-token",
  ],
  stdout: "piped",
}).output();

const token = new TextDecoder().decode(tokenOutput).trim();

await Deno.run({
  cmd: ["terraform"].concat(Deno.args),
  env: {
    GOOGLE_OAUTH_ACCESS_TOKEN: token,
  },
}).status();