IAM membership conditions

[mruoss]

TL;DR

The resource google_storage_bucket_iam_member supports conditions. However, these are not exposed in this module at the moment.

Terraform Resources

https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storage_bucket_iam

Detailed design

resource "google_storage_bucket_iam_member" "members" {
  for_each = {
    for m in var.iam_members : "${m.role} ${m.member}" => m
  }
  bucket = google_storage_bucket.bucket.name
  role   = each.value.role
  member = each.value.member

  dynamic "condition" {
      for_each = each.value.condition
      title       = condition.value.title
      description = condition.value.description
      expression  = condition.value.expression
  }
}

Additional information

No response