From ca7dc0e7a2cfac3bdd02c62f6d6c6c5660dbae5f Mon Sep 17 00:00:00 2001 From: Julio Castillo Date: Wed, 9 Feb 2022 18:14:17 +0100 Subject: [PATCH] Add service account prefix to member bindings --- modules/project/shared-vpc.tf | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/modules/project/shared-vpc.tf b/modules/project/shared-vpc.tf index d228d87d..9c7bd71e 100644 --- a/modules/project/shared-vpc.tf +++ b/modules/project/shared-vpc.tf @@ -69,8 +69,7 @@ resource "google_project_iam_member" "shared_vpc_host_robots" { role = each.value.role member = ( each.value.service == "cloudservices" - ? local.service_account_cloud_services - : local.service_accounts_robots[each.value.service] + ? "serviceAccount:${local.service_account_cloud_services}" + : "serviceAccount:${local.service_accounts_robots[each.value.service]}" ) } -