fix: adding roles

MobilityData · Oct 7, 2023 · f1029b9 · f1029b9
1 parent 38d43d5
commit f1029b9
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/db-update-dev.yml b/.github/workflows/db-update-dev.yml
@@ -4,7 +4,7 @@ on:
   push: # Update on merge on master if the changelog file has been updated
     branches:
       - main
-      - 'feat/19'
+#      - 'feat/19'
 #    TODO restore before merge
 #    paths:
 #      - 'liquibase/changelog.xml'

diff --git a/infra/batch/main.tf b/infra/batch/main.tf
@@ -21,6 +21,12 @@ data "google_service_account" "ci_impersonator_service_account" {
   project    = var.project_id
 }
 
+resource "google_project_iam_member" "ci_binding_cloudsql_admin" {
+  project = var.project_id
+  role    = "roles/datastore.databases.owner"
+  member  = "serviceAccount:${data.google_service_account.ci_impersonator_service_account.email}"
+}
+
 resource "google_project_service" "services" {
   for_each                   = toset(local.services)
   service                    = each.value

diff --git a/infra/terraform-init/main.tf b/infra/terraform-init/main.tf
@@ -160,13 +160,7 @@ resource "google_project_iam_member" "ci_binding_cloudsql_admin" {
 
 resource "google_project_iam_member" "ci_binding_cloudsql_admin" {
   project = var.project_id
-  role    = "roles/datastore.databases.create"
-  member  = "serviceAccount:${google_service_account.ci_service_account.email}"
-}
-
-resource "google_project_iam_member" "ci_binding_cloudsql_admin" {
-  project = var.project_id
-  role    = "roles/datastore.databases.list"
+  role    = "roles/datastore.databases.owner"
   member  = "serviceAccount:${google_service_account.ci_service_account.email}"
 }