Project improperly set to role name when applying additive roles via project_roles variable.
Closed this issue · 2 comments
heiny commented
https://github.com/terraform-google-modules/terraform-google-service-accounts/blob/master/main.tf#L49-L55
This code should be:
project = var.project_id
Apologies for not submitting a PR directly, I'm currently ill equipped to do so.
morgante commented
This is actually intentional, as from the example you can see that the role is meant to include the project name: https://github.com/terraform-google-modules/terraform-google-service-accounts#usage
The intention is to allow granting roles on multiple projects.
heiny commented
Thanks, RTFM!