Skip to content

Commit

Permalink
Give pudl usage metrics etl service account permission to read from a…
Browse files Browse the repository at this point in the history
…rchive bucket and list buckets, previous commit was missing a role
  • Loading branch information
bendnorman committed Sep 11, 2024
1 parent 1aaac08 commit fe095b9
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion terraform/main.tf
Original file line number Diff line number Diff line change
Expand Up @@ -426,8 +426,9 @@ resource "google_storage_bucket_iam_member" "usage_metrics_archiver_gcs_iam" {
}

resource "google_storage_bucket_iam_member" "usage_metrics_etl_gcs_iam" {
for_each = toset(["roles/storage.legacyBucketReader", "roles/storage.objectViewer"])

bucket = google_storage_bucket.pudl_usage_metrics_archive_bucket.name
role = "roles/storage.legacyBucketReader"
role = each.key
member = "serviceAccount:pudl-usage-metrics-etl@catalyst-cooperative-pudl.iam.gserviceaccount.com"
}

0 comments on commit fe095b9

Please sign in to comment.