Add service account prefix to member bindings

2022-02-09 18:14:17 +01:00 · 2022-02-09 18:14:17 +01:00 · ca7dc0e7a2
parent b377b30910
commit ca7dc0e7a2
1 changed files with 2 additions and 3 deletions
--- a/modules/project/shared-vpc.tf
+++ b/modules/project/shared-vpc.tf
@ -69,8 +69,7 @@ resource "google_project_iam_member" "shared_vpc_host_robots" {
  role     = each.value.role
  member = (
    each.value.service == "cloudservices"
-    ? local.service_account_cloud_services
-    : local.service_accounts_robots[each.value.service]
+    ? "serviceAccount:${local.service_account_cloud_services}"
+    : "serviceAccount:${local.service_accounts_robots[each.value.service]}"
  )
 }
-