add the self project key to service account namespaces (#3490)

2025-10-30 17:42:13 +01:00
parent 4a9085675e
commit c765043c5c
8 changed files with 66 additions and 14 deletions
--- a/modules/project-factory/projects-bigquery.tf
+++ b/modules/project-factory/projects-bigquery.tf
@@ -39,7 +39,8 @@ module "bigquery-datasets" {
    iam_principals = merge(
      local.ctx.iam_principals,
      local.projects_sas_iam_emails,
-      local.automation_sas_iam_emails
+      local.automation_sas_iam_emails,
+      lookup(local.self_sas_iam_emails, each.value.project_key, {})
    )
    locations   = local.ctx.locations
    project_ids = local.ctx_project_ids