Merge pull request #42 from mitou/fix/add-patch-permission

[修正] podのstatusを更新できなくてmattermostが再起動を繰り返していたため修正

terraform/iam/iam.tf

@@ -122,3 +122,11 @@ resource "google_project_iam_binding" "secret-manager" {
     "serviceAccount:${google_service_account.wi-secret-mattermost-primary.email}",
   ]
 }
+
+resource "google_project_iam_binding" "pod_status_updater_binding" {
+  project = "mitou-jr"
+  role    = google_project_iam_custom_role.pod_status_updater.id
+  members = [
+    "serviceAccount:${google_service_account.wi-mattermost-primary.email}",
+  ]
+}

terraform/iam/role.tf

@@ -28,3 +28,10 @@ resource "google_project_iam_custom_role" "tfplanner" {
     "dns.responsePolicyRules.list",
   ]
 }
+
+resource "google_project_iam_custom_role" "pod_status_updater" {
+  role_id     = "podStatusUpdater"
+  title       = "Pod Status Updater"
+  description = "Allows updating pod status"
+  permissions = ["container.pods.updateStatus"]
+}