kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix IAM drift in vertex-mlops

Browse Source
This commit is contained in:
Wiktor Niesiobędzki
2024-11-05 10:04:51 +00:00
committed by Wiktor Niesiobędzki
parent 4ab9c74e9f
commit 232a7cd853
2 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
blueprints/data-solutions/vertex-mlops/main.tf
View File

@@ -234,11 +234,18 @@ module "project" {
module.service-account-github.iam_email,
module.project.service_agents.cloudbuild.iam_email
]
"roles/monitoring.metricWriter" = [module.service-account-mlops.iam_email]
"roles/run.invoker" = [module.service-account-mlops.iam_email]
"roles/logging.logWriter" = [
module.service-account-notebook.iam_email,
]
"roles/monitoring.metricWriter" = [
module.service-account-mlops.iam_email,
module.service-account-notebook.iam_email,
]
"roles/run.invoker" = [module.service-account-mlops.iam_email]
"roles/serviceusage.serviceUsageConsumer" = [
module.service-account-mlops.iam_email,
module.service-account-github.iam_email
module.service-account-github.iam_email,
module.service-account-notebook.iam_email,
]
"roles/storage.admin" = [
module.service-account-mlops.iam_email,

7
blueprints/data-solutions/vertex-mlops/vertex.tf
View File

@@ -37,13 +37,6 @@ module "service-account-notebook" {
source = "../../../modules/iam-service-account"
project_id = module.project.project_id
name = "notebook-sa"
iam_project_roles = {
(module.project.project_id) = [
"roles/logging.logWriter",
"roles/monitoring.metricWriter",
"roles/serviceusage.serviceUsageConsumer",
]
}
}
resource "google_notebooks_runtime" "runtime" {