Merge pull request #12 from Levetty/update/permission-20241212

Update permissions ver.20241212
Levetty · Dec 12, 2024 · 265067c · 265067c
2 parents 462aff8 + 7e7ddb6
commit 265067c
Show file tree

Hide file tree

Showing 3 changed files with 1,804 additions and 70 deletions.
diff --git a/README.md b/README.md
@@ -6,7 +6,7 @@ Terraform module for Cloudbase on GCP.
 ```
 module "cloudbase" {
   source  = "Levetty/cloudbase/google"
-  version = "0.6.0"
+  version = "0.6.1"
 
   project_id = "xxx" # required
 

diff --git a/main.tf b/main.tf
@@ -17,15 +17,9 @@ resource "google_project_iam_custom_role" "cloudbase_project_custom_role" {
   permissions = var.cloudbase_role_permissions
 }
 
-resource "google_project_iam_member" "bind_viewer_role" {
+resource "google_project_iam_member" "bind_security_reviewer_role" {
   project = var.project_id
-  role    = "roles/viewer"
-  member  = "serviceAccount:${google_service_account.cloudbase_service_account.email}"
-}
-
-resource "google_project_iam_member" "bind_security_admin_role" {
-  project = var.project_id
-  role    = "roles/compute.securityAdmin"
+  role    = "roles/iam.securityReviewer"
   member  = "serviceAccount:${google_service_account.cloudbase_service_account.email}"
 }