fix bigquery

uche-madu · Oct 21, 2023 · 8401d07 · 8401d07
1 parent 6fbc5e6
commit 8401d07
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/terraform/service-accounts.tf b/terraform/service-accounts.tf
@@ -5,4 +5,14 @@
 # Retrieve the service account established in setup.sh
 data "google_service_account" "deb-sa" {
   account_id = "deb-sa"
+}
+
+
+resource "google_service_account_iam_binding" "impersonate_binding" {
+  service_account_id = module.airflow_workload_identity.gcp_service_account_email
+  role               = "roles/iam.serviceAccountTokenCreator"
+
+  members = [
+    "serviceAccount:${data.google_service_account.deb-sa.email}"
+  ]
 }