Allow gke stage to write to automation bucket

This commit is contained in:
Julio Castillo 2022-08-25 15:11:44 +02:00
parent c3e6a03eaa
commit a82ef7550e
1 changed files with 6 additions and 0 deletions

View File

@ -98,6 +98,9 @@ module "branch-gke-dev-sa" {
iam = {
"roles/iam.serviceAccountTokenCreator" = ["group:${local.groups.gcp-devops}"]
}
iam_storage_roles = {
(var.automation.outputs_bucket) = ["roles/storage.admin"]
}
}
moved {
@ -115,6 +118,9 @@ module "branch-gke-prod-sa" {
iam = {
"roles/iam.serviceAccountTokenCreator" = ["group:${local.groups.gcp-devops}"]
}
iam_storage_roles = {
(var.automation.outputs_bucket) = ["roles/storage.admin"]
}
}
moved {