Allow gke stage to write to automation bucket

2022-08-25 15:11:44 +02:00
parent c3e6a03eaa
commit a82ef7550e
1 changed files with 6 additions and 0 deletions
--- a/fast/stages/01-resman/branch-gke.tf
+++ b/fast/stages/01-resman/branch-gke.tf
@@ -98,6 +98,9 @@ module "branch-gke-dev-sa" {
  iam = {
    "roles/iam.serviceAccountTokenCreator" = ["group:${local.groups.gcp-devops}"]
  }
+  iam_storage_roles = {
+    (var.automation.outputs_bucket) = ["roles/storage.admin"]
+  }
 }

 moved {
@@ -115,6 +118,9 @@ module "branch-gke-prod-sa" {
  iam = {
    "roles/iam.serviceAccountTokenCreator" = ["group:${local.groups.gcp-devops}"]
  }
+  iam_storage_roles = {
+    (var.automation.outputs_bucket) = ["roles/storage.admin"]
+  }
 }

 moved {