Add storage admin permssion for healthcare SA (GoogleCloudPlatform#11881

)
gontech · Oct 16, 2024 · b4c32aa · b4c32aa
1 parent 8456e1c
commit b4c32aa
Showing 1 changed file with 9 additions and 2 deletions.
diff --git a/.ci/infra/terraform/main.tf b/.ci/infra/terraform/main.tf
@@ -376,8 +376,6 @@ resource "google_project_service_identity" "sqladmin_sa" {
   service = "sqladmin.googleapis.com"
 }
 
-# TODO: Replace these permissions with bootstrapped permissions
-
 # TestAccComposerEnvironment_fixPyPiPackages
 # TestAccComposerEnvironmentComposer2_private
 # TestAccComposerEnvironment_withEncryptionConfigComposer1
@@ -409,6 +407,15 @@ resource "google_project_iam_member" "compute_agent_secret_accessor" {
   member  = "serviceAccount:${google_project.proj.number}[email protected]"
 }
 
+# TestAccHealthcarePipelineJob_healthcarePipelineJobMappingReconDestExample
+# TestAccHealthcarePipelineJob_healthcarePipelineJobReconciliationExample
+# TestAccHealthcarePipelineJob_healthcarePipelineJobWhistleMappingExample
+resource "google_project_iam_member" "healthcare_agent_storage_object_admin" {
+  project = google_project.proj.project_id
+  role    = "roles/storage.objectAdmin"
+  member  = "serviceAccount:service-${google_project.proj.number}@gcp-sa-healthcare.iam.gserviceaccount.com"
+}
+
 # TestAccVertexAIEndpoint_vertexAiEndpointNetwork
 # TestAccVertexAIFeaturestoreEntitytype_vertexAiFeaturestoreEntitytypeExample
 # TestAccVertexAIFeaturestoreEntitytype_vertexAiFeaturestoreEntitytypeWithBetaFieldsExample