Add support for granting permissions to apache kafka service agent

Managed Kafka service agent needs roles/managedkafka.serviceAgent on the subnet.
terraform-google-modules · Dec 3, 2024 · 43a52e7 · 43a52e7
1 parent 3d53cd3
commit 43a52e7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/modules/shared_vpc_access/main.tf b/modules/shared_vpc_access/main.tf
@@ -58,6 +58,10 @@ locals {
       service_account = format("service-%[email protected]", local.service_project_number)
       role            = "roles/compute.networkUser"
     }
+    "managedkafka.googleapis.com" : {
+      service_account = format("service-%[email protected]", local.service_project_number)
+      role            = "roles/managedkafka.serviceAgent"
+    }
   }
   gke_shared_vpc_enabled        = contains(var.active_apis, "container.googleapis.com")
   composer_shared_vpc_enabled   = contains(var.active_apis, "composer.googleapis.com")