Skip to content

Commit 198c71e

Browse files
Supplementing missing IAM secions mapping in project-factory module. (GoogleCloudPlatform#4044)
1 parent 54fa6d3 commit 198c71e

1 file changed

Lines changed: 6 additions & 1 deletion

File tree

modules/project-factory/projects-service-accounts.tf

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ locals {
3131
iam_bindings = try(opts.iam_bindings, {})
3232
iam_bindings_additive = try(opts.iam_bindings_additive, {})
3333
iam_billing_roles = try(opts.iam_billing_roles, {})
34+
iam_folder_roles = try(opts.iam_folder_roles, {})
3435
iam_organization_roles = try(opts.iam_organization_roles, {})
3536
iam_sa_roles = try(opts.iam_sa_roles, {})
3637
iam_project_roles = try(opts.iam_project_roles, {})
@@ -93,13 +94,17 @@ module "service-accounts" {
9394
project_ids = local.ctx_project_ids
9495
tag_values = local.ctx_tag_values
9596
})
97+
iam_billing_roles = each.value.iam_billing_roles
98+
iam_folder_roles = each.value.iam_folder_roles
99+
iam_organization_roles = each.value.iam_organization_roles
96100
iam_project_roles = merge(
97101
each.value.iam_project_roles,
98102
{
99103
"$project_ids:${each.value.project_key}" = each.value.iam_self_roles
100104
}
101105
)
102-
tag_bindings = each.value.tag_bindings
106+
iam_storage_roles = each.value.iam_storage_roles
107+
tag_bindings = each.value.tag_bindings
103108
}
104109

105110
moved {

0 commit comments

Comments
 (0)