Merge pull request #788 from near/kmaus-near/add-log-writer-role

FIX: add log writer role
near · Jul 31, 2024 · 862de64 · 862de64
2 parents dd99c3b + 0066ba5
commit 862de64
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 4 deletions.
diff --git a/infra/multichain-mainnet/main.tf b/infra/multichain-mainnet/main.tf
@@ -74,6 +74,7 @@ resource "google_project_iam_member" "sa-roles" {
       "roles/secretmanager.admin",
       "roles/storage.objectAdmin",
       "roles/iam.serviceAccountAdmin",
+      "roles/logging.logWriter"
   ])
 
   role    = each.key

diff --git a/infra/partner-mainnet/main.tf b/infra/partner-mainnet/main.tf
@@ -74,6 +74,7 @@ resource "google_project_iam_member" "sa-roles" {
     "roles/secretmanager.admin",
     "roles/storage.objectAdmin",
     "roles/iam.serviceAccountAdmin",
+    "roles/logging.logWriter",
   ])
 
   role     = each.key

diff --git a/infra/partner-testnet/main.tf b/infra/partner-testnet/main.tf
@@ -68,18 +68,17 @@ resource "google_service_account" "service_account" {
   display_name = "Multichain ${var.env} Account"
 }
 
-resource "google_project_iam_binding" "sa-roles" {
+resource "google_project_iam_member" "sa-roles" {
   for_each = toset([
     "roles/datastore.user",
     "roles/secretmanager.admin",
     "roles/storage.objectAdmin",
     "roles/iam.serviceAccountAdmin",
+    "roles/logging.logWriter",
   ])
 
   role = each.key
-  members = [
-    "serviceAccount:${google_service_account.service_account.email}"
-  ]
+  member  = "serviceAccount:${google_service_account.service_account.email}"
   project = var.project_id
 }