remove role cloudbuild.connectionViewer

terraform-google-modules · Oct 24, 2024 · ee6523f · ee6523f
1 parent c2b8ce9
commit ee6523f
Show file tree

Hide file tree

Showing 2 changed files with 0 additions and 8 deletions.
diff --git a/modules/im_cloudbuild_workspace/cb.tf b/modules/im_cloudbuild_workspace/cb.tf
@@ -139,6 +139,5 @@ resource "time_sleep" "iam_propagation" {
     google_project_iam_member.cb_logWriter_role,
     google_project_iam_member.cb_serviceAccountUser_role,
     google_project_iam_member.cb_storage_objects_viewer,
-    google_project_iam_member.cb_connection_viewer,
   ]
 }
diff --git a/modules/im_cloudbuild_workspace/sa.tf b/modules/im_cloudbuild_workspace/sa.tf
@@ -70,13 +70,6 @@ resource "google_project_iam_member" "cb_storage_objects_viewer" {
   member  = "serviceAccount:${local.cloudbuild_sa_email}"
 }
 
-resource "google_project_iam_member" "cb_connection_viewer" {
-  count   = local.create_cloudbuild_sa ? 1 : 0
-  project = var.project_id
-  role    = "roles/cloudbuild.connectionViewer"
-  member  = "serviceAccount:${local.cloudbuild_sa_email}"
-}
-
 resource "google_service_account" "im_sa" {
   count                        = local.create_infra_manager_sa ? 1 : 0
   project                      = var.project_id