From 33bf7ab1573b0771e01ec162e3871c9cfd57c6c2 Mon Sep 17 00:00:00 2001
From: aumohr <148321435+aumohr@users.noreply.github.com>
Date: Tue, 9 Dec 2025 14:09:06 +0400
Subject: [PATCH] added role required for support ticket creation (#3578)

* added role required for support ticket creation

* updated tests for role count

* updated tests for resource count
---
 .../0-org-setup/datasets/classic/organization/.config.yaml    | 1 +
 .../0-org-setup/datasets/hardened/organization/.config.yaml   | 1 +
 tests/fast/stages/s0_org_setup/hardened.yaml                  | 4 ++--
 tests/fast/stages/s0_org_setup/simple.yaml                    | 4 ++--
 4 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/fast/stages/0-org-setup/datasets/classic/organization/.config.yaml b/fast/stages/0-org-setup/datasets/classic/organization/.config.yaml
index f3c4e718e..7969f5c86 100644
--- a/fast/stages/0-org-setup/datasets/classic/organization/.config.yaml
+++ b/fast/stages/0-org-setup/datasets/classic/organization/.config.yaml
@@ -42,6 +42,7 @@ iam_by_principals:
   $iam_principals:gcp-organization-admins:
     - roles/cloudasset.owner
     - roles/cloudsupport.admin
+    - roles/cloudsupport.techSupportEditor
     - roles/compute.osAdminLogin
     - roles/compute.osLoginExternalUser
     - roles/compute.xpnAdmin
diff --git a/fast/stages/0-org-setup/datasets/hardened/organization/.config.yaml b/fast/stages/0-org-setup/datasets/hardened/organization/.config.yaml
index 852aa089c..7a995f5fb 100644
--- a/fast/stages/0-org-setup/datasets/hardened/organization/.config.yaml
+++ b/fast/stages/0-org-setup/datasets/hardened/organization/.config.yaml
@@ -42,6 +42,7 @@ iam_by_principals:
   $iam_principals:gcp-organization-admins:
     - roles/cloudasset.owner
     - roles/cloudsupport.admin
+    - roles/cloudsupport.techSupportEditor
     - roles/compute.osAdminLogin
     - roles/compute.osLoginExternalUser
     - roles/compute.xpnAdmin
diff --git a/tests/fast/stages/s0_org_setup/hardened.yaml b/tests/fast/stages/s0_org_setup/hardened.yaml
index e41886c85..df500b2b4 100644
--- a/tests/fast/stages/s0_org_setup/hardened.yaml
+++ b/tests/fast/stages/s0_org_setup/hardened.yaml
@@ -5767,7 +5767,7 @@ counts:
   google_monitoring_alert_policy: 9
   google_org_policy_custom_constraint: 55
   google_org_policy_policy: 114
-  google_organization_iam_binding: 37
+  google_organization_iam_binding: 38
   google_organization_iam_custom_role: 9
   google_project: 3
   google_project_iam_binding: 17
@@ -5790,5 +5790,5 @@ counts:
   google_tags_tag_value_iam_binding: 4
   local_file: 9
   modules: 48
-  resources: 473
+  resources: 474
   terraform_data: 4
diff --git a/tests/fast/stages/s0_org_setup/simple.yaml b/tests/fast/stages/s0_org_setup/simple.yaml
index c1a6c1a7b..eb05e3daa 100644
--- a/tests/fast/stages/s0_org_setup/simple.yaml
+++ b/tests/fast/stages/s0_org_setup/simple.yaml
@@ -2783,7 +2783,7 @@ counts:
   google_logging_project_bucket_config: 3
   google_org_policy_custom_constraint: 1
   google_org_policy_policy: 37
-  google_organization_iam_binding: 36
+  google_organization_iam_binding: 37
   google_organization_iam_custom_role: 9
   google_project: 3
   google_project_iam_audit_config: 2
@@ -2806,5 +2806,5 @@ counts:
   google_tags_tag_value_iam_binding: 4
   local_file: 9
   modules: 48
-  resources: 315
+  resources: 316
   terraform_data: 4