Support conformance env lifecycle in GCP CI Cloud Build

roger2hk · roger2hk · commit 69df9ada6b1e · 2024-11-26T13:49:26.000Z
diff --git a/deployment/modules/gcp/cloudbuild/main.tf b/deployment/modules/gcp/cloudbuild/main.tf
@@ -102,9 +102,9 @@ resource "google_project_iam_member" "iam_service_account_admin" {
   member  = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"
 }
 
-resource "google_project_iam_member" "browser" {
+resource "google_project_iam_member" "resourcemanager_project_iam_admin" {
   project = var.project_id
-  role    = "roles/browser"
+  role    = "roles/resourcemanager.projectIamAdmin"
   member  = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"
 }
 

Original file line number	Diff line number	Diff line change
`@@ -102,9 +102,9 @@ resource "google_project_iam_member" "iam_service_account_admin" {`
`102`	`102`	`member = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"`
`103`	`103`	`}`
`104`	`104`
`105`		`-resource "google_project_iam_member" "browser" {`
	`105`	`+resource "google_project_iam_member" "resourcemanager_project_iam_admin" {`
`106`	`106`	`project = var.project_id`
`107`		`- role = "roles/browser"`
	`107`	`+ role = "roles/resourcemanager.projectIamAdmin"`
`108`	`108`	`member = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"`
`109`	`109`	`}`
`110`	`110`