diff --git a/common/modules/gcp-project/main.tf b/common/modules/gcp-project/main.tf index 134ef3a7..05b899b7 100644 --- a/common/modules/gcp-project/main.tf +++ b/common/modules/gcp-project/main.tf @@ -261,6 +261,8 @@ data "google_iam_policy" "combined" { "serviceAccount:${google_service_account.gke_cluster_node.email}", "serviceAccount:${google_service_account.gke_cluster_pod_default.email}", "serviceAccount:${google_service_account.gke_cluster_pod_backup_exporter.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_preferences.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_flowmanager.email}", ] } @@ -271,6 +273,8 @@ data "google_iam_policy" "combined" { "serviceAccount:${google_service_account.gke_cluster_node.email}", "serviceAccount:${google_service_account.gke_cluster_pod_default.email}", "serviceAccount:${google_service_account.gke_cluster_pod_backup_exporter.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_preferences.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_flowmanager.email}", ] } @@ -281,6 +285,8 @@ data "google_iam_policy" "combined" { "serviceAccount:${google_service_account.gke_cluster_node.email}", "serviceAccount:${google_service_account.gke_cluster_pod_default.email}", "serviceAccount:${google_service_account.gke_cluster_pod_backup_exporter.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_preferences.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_flowmanager.email}", ] } @@ -291,6 +297,8 @@ data "google_iam_policy" "combined" { "serviceAccount:${google_service_account.gke_cluster_node.email}", "serviceAccount:${google_service_account.gke_cluster_pod_default.email}", "serviceAccount:${google_service_account.gke_cluster_pod_backup_exporter.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_preferences.email}", + "serviceAccount:${google_service_account.gke_cluster_pod_flowmanager.email}", ] } diff --git a/common/modules/gcp-project/service_accounts.tf b/common/modules/gcp-project/service_accounts.tf index e921724b..dbd3de3e 100644 --- a/common/modules/gcp-project/service_accounts.tf +++ b/common/modules/gcp-project/service_accounts.tf @@ -32,3 +32,17 @@ resource "google_service_account" "gke_cluster_pod_k8s_snapshots" { display_name = "gke-cluster-pod-k8s-snapshots" project = "${google_project.project.project_id}" } + +# Service account for preferences +resource "google_service_account" "gke_cluster_pod_preferences" { + account_id = "gke-cluster-pod-preferences" + display_name = "gke-cluster-pod-preferences" + project = "${google_project.project.project_id}" +} + +# Service account for flowmanger +resource "google_service_account" "gke_cluster_pod_flowmanager" { + account_id = "gke-cluster-pod-flowmanager" + display_name = "gke-cluster-pod-flowmanager" + project = "${google_project.project.project_id}" +}