Merge pull request openshift#2134 from csrwng/gcp_cp_attach

[gcp] data/data: add service user role to masters
zeenix · Aug 1, 2019 · 7bf8069 · 7bf8069
2 parents 7eaea99 + a402e99
commit 7bf8069
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/data/data/gcp/master/main.tf b/data/data/gcp/master/main.tf
@@ -28,6 +28,11 @@ resource "google_project_iam_member" "master-object-storage-admin" {
   member = "serviceAccount:${google_service_account.master-node-sa.email}"
 }
 
+resource "google_project_iam_member" "master-service-account-user" {
+  role   = "roles/iam.serviceAccountUser"
+  member = "serviceAccount:${google_service_account.master-node-sa.email}"
+}
+
 resource "google_compute_instance" "master" {
   count = var.instance_count