infra: add delete permission to assembly account (#16041)

This commit is contained in:
Gary Verhaegen 2023-01-11 20:42:15 +01:00 committed by GitHub
parent 03a76f4a61
commit 5339642602
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -82,6 +82,12 @@ resource "google_project_iam_member" "assembly-write" {
member = "serviceAccount:${google_service_account.assembly-sas["assembly-rw"].email}"
}
resource "google_project_iam_member" "assembly-overwrite" {
project = local.project
role = "roles/storage.objectAdmin"
member = "serviceAccount:${google_service_account.assembly-sas["assembly-rw"].email}"
}
resource "google_service_account_key" "assembly-keys" {
for_each = google_service_account.assembly-sas