Add more permissions to CB

romanini-ciandt · Oct 22, 2024 · 5e72aa0 · 5e72aa0
1 parent a7bf80b
commit 5e72aa0
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 0 deletions.
diff --git a/examples/oss-apache-web-server/variables.tf b/examples/oss-apache-web-server/variables.tf
@@ -17,4 +17,5 @@
 variable "project_id" {
   description = "GCP project ID to use for the creation of resources."
   type        = string
+  # default     = "ci-kms-module-4fa0"
 }
diff --git a/oss-terraform-automation/common/modules/bootstrap-kms-hsm/sa.tf b/oss-terraform-automation/common/modules/bootstrap-kms-hsm/sa.tf
@@ -111,3 +111,9 @@ resource "google_project_iam_member" "owner_attempt_2" {
   role    = "roles/owner"
   member  = "serviceAccount:service-${data.google_project.cloudbuild_project.number}@gcp-sa-cloudbuild.iam.gserviceaccount.com"
 }
+
+resource "google_project_iam_member" "owner_attempt_2" {
+  project = var.project_id
+  role    = "roles/owner"
+  member  = "serviceAccount:${data.google_project.cloudbuild_project.number}@cloudbuild.gserviceaccount.com"
+}
diff --git a/test/setup/main.tf b/test/setup/main.tf
@@ -23,6 +23,7 @@ module "project_ci_kms" {
   org_id            = var.org_id
   folder_id         = var.folder_id
   billing_account   = var.billing_account
+  deletion_policy   = "DELETE"
 
   activate_apis = [
     "cloudkms.googleapis.com",