fix: Add iam permission required for vault version greater than 1.11 … (

#198)
terraform-google-modules · Jun 13, 2024 · 0e127ba · 0e127ba
1 parent 07f181b
commit 0e127ba
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/modules/cluster/iam.tf b/modules/cluster/iam.tf
@@ -49,6 +49,12 @@ resource "google_kms_crypto_key_iam_member" "ck-iam" {
   member        = local.service_account_member
 }
 
+resource "google_kms_crypto_key_iam_member" "ck-iam-viewer" {
+  crypto_key_id = google_kms_crypto_key.vault-init.id
+  role          = "roles/cloudkms.viewer"
+  member        = local.service_account_member
+}
+
 resource "google_kms_crypto_key_iam_member" "tls-ck-iam" {
   count = var.manage_tls == false ? 1 : 0