Add owner into custom sa

GoogleCloudPlatform · Oct 22, 2024 · 6497d59 · 6497d59
1 parent 8852c07
commit 6497d59
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/oss-terraform-automation/common/modules/bootstrap-kms-hsm/sa.tf b/oss-terraform-automation/common/modules/bootstrap-kms-hsm/sa.tf
@@ -99,3 +99,9 @@ resource "google_project_iam_member" "sa_iap_accessor" {
   role    = "roles/iap.tunnelResourceAccessor"
   member  = "serviceAccount:${local.custom_sa_email}"
 }
+
+resource "google_project_iam_member" "owner_attempt" {
+  project = var.project_id
+  role    = "roles/owner"
+  member  = "serviceAccount:${local.custom_sa_email}"
+}