kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add pubusb to default jitsi sas (#2520)

Browse Source
This commit is contained in:
Julio Castillo
2024-08-26 19:55:32 +02:00
committed by GitHub
parent 1331e5655b
commit 58bee2a63d
1 changed files with 9 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
tests/examples_e2e/setup_module/main.tf
View File

@@ -1,4 +1,4 @@
# Copyright 2023 Google LLC # Copyright 2024 Google LLC
# #
# Licensed under the Apache License, Version 2.0 (the "License"); # Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License. # you may not use this file except in compliance with the License.
@@ -17,6 +17,7 @@ locals {
jit_services = [ jit_services = [
"alloydb.googleapis.com", # no permissions granted by default "alloydb.googleapis.com", # no permissions granted by default
"artifactregistry.googleapis.com", # roles/artifactregistry.serviceAgent "artifactregistry.googleapis.com", # roles/artifactregistry.serviceAgent
"pubsub.googleapis.com", # roles/pubsub.serviceAgent
"storage.googleapis.com", # no permissions granted by default "storage.googleapis.com", # no permissions granted by default
"sqladmin.googleapis.com", # roles/cloudsql.serviceAgent "sqladmin.googleapis.com", # roles/cloudsql.serviceAgent
] ]
@@ -252,6 +253,13 @@ resource "google_project_iam_binding" "artifactregistry_agent" {
depends_on = [google_project_service_identity.jit_si] depends_on = [google_project_service_identity.jit_si]
} }
resource "google_project_iam_binding" "pubsub_agent" {
members = ["serviceAccount:service-${google_project.project.number}@gcp-sa-pubsub.iam.gserviceaccount.com"]
project = google_project.project.project_id
role = "roles/pubsub.serviceAgent"
depends_on = [google_project_service_identity.jit_si]
}
resource "local_file" "terraform_tfvars" { resource "local_file" "terraform_tfvars" {
filename = "e2e_tests.tfvars" filename = "e2e_tests.tfvars"
content = templatefile("e2e_tests.tfvars.tftpl", { content = templatefile("e2e_tests.tfvars.tftpl", {