terraform-google-modules/terraform-google-service-accounts

Project improperly set to role name when applying additive roles via project_roles variable.

Closed this issue · 2 comments

heiny commented

https://github.com/terraform-google-modules/terraform-google-service-accounts/blob/master/main.tf#L49-L55
This code should be:
project = var.project_id

Apologies for not submitting a PR directly, I'm currently ill equipped to do so.

This is actually intentional, as from the example you can see that the role is meant to include the project name: https://github.com/terraform-google-modules/terraform-google-service-accounts#usage

The intention is to allow granting roles on multiple projects.

heiny commented

Thanks, RTFM!