updated IAM

samberthol · samberthol · commit 0b9c61f1b24f · 2024-01-13T20:51:08.000+01:00
diff --git a/01-landing.tf b/01-landing.tf
@@ -27,8 +27,8 @@ locals {
       module.land-sa-0.iam_email
     ]
    "roles/iam.serviceAccountTokenCreator" = [
-      "serviceAccount:service-${module.land-project.number}@gcp-sa-bigquerydatatransfer.iam.gserviceaccount.com"
-    ]  
+      module.land-sa-0.iam_email
+    ]   
   }
 }
 
diff --git a/04-publisher.tf b/04-publisher.tf
@@ -31,7 +31,10 @@ locals {
     ]
     "roles/storage.admin" = [
       module.prc-sa-0.iam_email
-    ]         
+    ]
+   "roles/iam.serviceAccountTokenCreator" = [
+      module.prc-sa-0.iam_email
+    ]   
   }
   publisher_schema_users = jsonencode([
     { name = "id", type = "INT64" },

Original file line number	Diff line number	Diff line change
`@@ -27,8 +27,8 @@ locals {`
`27`	`27`	`module.land-sa-0.iam_email`
`28`	`28`	`]`
`29`	`29`	`"roles/iam.serviceAccountTokenCreator" = [`
`30`		`- "serviceAccount:service-${module.land-project.number}@gcp-sa-bigquerydatatransfer.iam.gserviceaccount.com"`
`31`		`- ]`
	`30`	`+ module.land-sa-0.iam_email`
	`31`	`+ ]`
`32`	`32`	`}`
`33`	`33`	`}`
`34`	`34`
Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,10 @@ locals {`
`31`	`31`	`]`
`32`	`32`	`"roles/storage.admin" = [`
`33`	`33`	`module.prc-sa-0.iam_email`
`34`		`- ]`
	`34`	`+ ]`
	`35`	`+ "roles/iam.serviceAccountTokenCreator" = [`
	`36`	`+ module.prc-sa-0.iam_email`
	`37`	`+ ]`
`35`	`38`	`}`
`36`	`39`	`publisher_schema_users = jsonencode([`
`37`	`40`	`{ name = "id", type = "INT64" },`