artifact_registry.tf

resource "google_artifact_registry_repository" "application" {
  provider      = google-beta
  location      = var.region
  repository_id = "${var.service_name}-repository"
  description   = "${var.service_name} Docker Repository"
  format        = "DOCKER"
}

# NOTE: Allow pulling Container Image in Artifact Registry from GKE Node Pool Instance
resource "google_artifact_registry_repository_iam_member" "registry_reader" {
  provider   = google-beta
  location   = var.region
  repository = google_artifact_registry_repository.application.name
  role       = "roles/artifactregistry.reader"
  member     = "serviceAccount:${google_service_account.node_pool.email}"
}


# NOTE: Allow pulling Container Image in Artifact Registry from GKE Node Pool Instance
resource "google_artifact_registry_repository_iam_member" "github_registry_writer" {
  provider   = google-beta
  location   = var.region
  repository = google_artifact_registry_repository.application.name
  role       = "roles/artifactregistry.writer"
  member     = "serviceAccount:${google_service_account.github_workload_identity_federation.email}"
}