Merge pull request #124 from uche-madu/develop

add service account user role
uche-madu · Oct 25, 2023 · 6f401dd · 6f401dd
2 parents add010a + b04536f
commit 6f401dd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/terraform/gke.tf b/terraform/gke.tf
@@ -89,7 +89,7 @@ module "airflow_worker_workload_identity" {
   namespace                   = var.airflow_namespace
   project_id                  = var.project_id
   impersonate_service_account = data.google_service_account.deb-sa.email
-  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.admin", "roles/cloudsql.admin"]
+  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.admin", "roles/cloudsql.admin", "roles/iam.serviceAccountUser"]
   module_depends_on           = [helm_release.argocd]
 }
 
@@ -100,7 +100,7 @@ module "airflow_scheduler_workload_identity" {
   namespace                   = var.airflow_namespace
   project_id                  = var.project_id
   impersonate_service_account = data.google_service_account.deb-sa.email
-  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.admin", "roles/cloudsql.admin"]
+  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.admin", "roles/cloudsql.admin", "roles/iam.serviceAccountUser"]
   module_depends_on           = [helm_release.argocd]
 }