Atlantis

sa.yaml

# in order to be able to run Atlantis: https://www.runatlantis.io/
# https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_service_account
resource "google_service_account" "atlantis-sa" {
  account_id = "atlantis-sa"
  project = "my-project"
}

# https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_project_iam
resource "google_project_iam_member" "atlantis-im" {
  project = "my-project"
  role    = "roles/owner"
  member  = "serviceAccount:${google_service_account.atlantis-sa.email}"
}