Merge pull request #7273 from ameukam/allow-gcb-sa-kubernetes-release…

…-test gcp: Allow GCB service agent for kubernetes-release-test
kubernetes · Sep 9, 2024 · 5a417fe · 5a417fe
2 parents bd07c21 + f869fc9
commit 5a417fe
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/infra/gcp/terraform/k8s-infra-releases-prod/main.tf b/infra/gcp/terraform/k8s-infra-releases-prod/main.tf
@@ -49,6 +49,14 @@ resource "google_storage_hmac_key" "fastly_reader_key" {
   service_account_email = google_service_account.fastly_reader.email
 }
 
+// TODO: remove this after https://github.com/kubernetes/release/issues/3425
+resource "google_storage_bucket_iam_member" "release_object_admin" {
+  bucket     = module.k8s_releases_prod.bucket_name
+  role       = "roles/storage.objectAdmin"
+  member     = "serviceAccount:[email protected]"
+  depends_on = [module.k8s_releases_prod]
+}
+
 resource "google_storage_bucket_iam_member" "fastly_reader" {
   bucket     = module.k8s_releases_prod.bucket_name
   role       = "roles/storage.objectViewer"