zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update main.tf

This commit is contained in:
Ludovico Magnocavallo 2022-01-14 17:55:12 +01:00 committed by GitHub
parent aa17e31b93
commit 4512e7e59d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
examples/data-solutions/gcs-to-bq-with-least-privileges/main.tf
View File

@ -44,7 +44,7 @@ module "project" {
"roles/storage.objectViewer" = [
module.service-account-orch.iam_email,
],
#Bigquery roles
# BigQuery roles
"roles/bigquery.admin" = concat([
module.service-account-orch.iam_email,
], var.data_eng_principals
@ -65,7 +65,7 @@ module "project" {
module.service-account-bq.iam_email,
module.service-account-df.iam_email
]
#Common roles
# common roles
"roles/logging.logWriter" = [
module.service-account-bq.iam_email,
module.service-account-landing.iam_email,
@ -85,7 +85,7 @@ module "project" {
"roles/viewer" = concat(
var.data_eng_principals
)
#Dataflow roles
# Dataflow roles
"roles/dataflow.admin" = concat([
module.service-account-orch.iam_email,
], var.data_eng_principals
@ -93,7 +93,7 @@ module "project" {
"roles/dataflow.worker" = [
module.service-account-df.iam_email,
]
#Network roles
# network roles
"roles/compute.networkUser" = [
module.service-account-df.iam_email,
"serviceAccount:${module.project.service_accounts.robots.dataflow}"