diff --git a/infra/multichain-mainnet/main.tf b/infra/multichain-mainnet/main.tf index 020ec810b..0a4c73ac8 100644 --- a/infra/multichain-mainnet/main.tf +++ b/infra/multichain-mainnet/main.tf @@ -74,6 +74,7 @@ resource "google_project_iam_member" "sa-roles" { "roles/secretmanager.admin", "roles/storage.objectAdmin", "roles/iam.serviceAccountAdmin", + "roles/logging.logWriter" ]) role = each.key diff --git a/infra/partner-mainnet/main.tf b/infra/partner-mainnet/main.tf index 6befe535f..247d59157 100644 --- a/infra/partner-mainnet/main.tf +++ b/infra/partner-mainnet/main.tf @@ -74,6 +74,7 @@ resource "google_project_iam_member" "sa-roles" { "roles/secretmanager.admin", "roles/storage.objectAdmin", "roles/iam.serviceAccountAdmin", + "roles/logging.logWriter", ]) role = each.key diff --git a/infra/partner-testnet/main.tf b/infra/partner-testnet/main.tf index 46af03079..f5471036b 100644 --- a/infra/partner-testnet/main.tf +++ b/infra/partner-testnet/main.tf @@ -68,18 +68,17 @@ resource "google_service_account" "service_account" { display_name = "Multichain ${var.env} Account" } -resource "google_project_iam_binding" "sa-roles" { +resource "google_project_iam_member" "sa-roles" { for_each = toset([ "roles/datastore.user", "roles/secretmanager.admin", "roles/storage.objectAdmin", "roles/iam.serviceAccountAdmin", + "roles/logging.logWriter", ]) role = each.key - members = [ - "serviceAccount:${google_service_account.service_account.email}" - ] + member = "serviceAccount:${google_service_account.service_account.email}" project = var.project_id }