Merge pull request #61 from ghchinoy/tf-roles

feat: adds roles to service account
GoogleCloudPlatform · May 12, 2024 · 3113a7c · 3113a7c
2 parents a090a46 + 5b998eb
commit 3113a7c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/tf/iam.tf b/tf/iam.tf
@@ -23,8 +23,12 @@ module "genai_run_service_account" {
     "${var.project_id}=>roles/logging.logWriter",
     "${var.project_id}=>roles/artifactregistry.reader",
     "${var.project_id}=>roles/storage.objectViewer",
+    "${var.project_id}=>roles/storage.objectUser",
     "${var.project_id}=>roles/aiplatform.admin",
     "${var.project_id}=>roles/secretmanager.secretAccessor",
+    "${var.project_id}=>roles/bigquery.dataViewer",
+    "${var.project_id}=>roles/bigquery.jobUser",
+    "${var.project_id}=>roles/datastore.user",
   ]
 }