Merge pull request #118 from uche-madu/develop

add roles to service accounts
uche-madu · Oct 23, 2023 · 8aebb5f · 8aebb5f
2 parents 210c2af + 9c2a05f
commit 8aebb5f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/terraform/gke.tf b/terraform/gke.tf
@@ -89,6 +89,7 @@ module "airflow_worker_workload_identity" {
   namespace                   = var.airflow_namespace
   project_id                  = var.project_id
   impersonate_service_account = data.google_service_account.deb-sa.email
+  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.jobUser", "roles/cloudsql.admin"]
   module_depends_on           = [helm_release.argocd]
 }
 
@@ -99,6 +100,7 @@ module "airflow_scheduler_workload_identity" {
   namespace                   = var.airflow_namespace
   project_id                  = var.project_id
   impersonate_service_account = data.google_service_account.deb-sa.email
+  roles                       = ["roles/storage.admin", "roles/compute.admin", "roles/dataproc.editor", "roles/bigquery.jobUser", "roles/cloudsql.admin"]
   module_depends_on           = [helm_release.argocd]
 }