fix: add permission to update pod status

mitou · Apr 29, 2024 · d8a3052 · d8a3052
1 parent 8798190
commit d8a3052
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/terraform/iam/iam.tf b/terraform/iam/iam.tf
@@ -122,3 +122,10 @@ resource "google_project_iam_binding" "secret-manager" {
     "serviceAccount:${google_service_account.wi-secret-mattermost-primary.email}",
   ]
 }
+
+resource "google_project_iam_binding" "pod_status_updater_binding" {
+  role = google_project_iam_custom_role.pod_status_updater.id
+  members = [
+    "serviceAccount:${google_service_account.wi-mattermost-primary.email}",
+  ]
+}
diff --git a/terraform/iam/role.tf b/terraform/iam/role.tf
@@ -28,3 +28,10 @@ resource "google_project_iam_custom_role" "tfplanner" {
     "dns.responsePolicyRules.list",
   ]
 }
+
+resource "google_project_iam_custom_role" "pod_status_updater" {
+  role_id     = "podStatusUpdater"
+  title       = "Pod Status Updater"
+  description = "Allows updating pod status"
+  permissions = ["container.pods.updateStatus"]
+}