Skip to content

Commit

Permalink
Fix permission definition for filestore backups iam custom role
Browse files Browse the repository at this point in the history
  • Loading branch information
sgibson91 committed Jul 18, 2024
1 parent e6ca360 commit 0b4d000
Showing 1 changed file with 7 additions and 1 deletion.
8 changes: 7 additions & 1 deletion terraform/gcp/filestore-backup-workload-identity.tf
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,13 @@ resource "google_project_iam_custom_role" "filestore_backups" {
project = var.project_id
title = "Identify as project role for pods in ${var.prefix}"
description = "Minimal role for gcp-filestore-backups pods on ${var.prefix} to identify as current project"
permissions = ["file.backups.*"]
permissions = [
"file.backups.create",
"file.backups.update",
"file.backups.delete",
"file.backups.get",
"file.backups.list"
]
}

resource "google_project_iam_member" "filestore_backups_binding" {
Expand Down

0 comments on commit 0b4d000

Please sign in to comment.