Add cloud trace agent role to gke service account

mattkaem · mattkaem · commit 0086e21eda5e · 2024-05-06T14:46:06.000+02:00
Signed-off-by: Matthias Kaemmer &lt;m.kaemmer@sotec.eu&gt;
diff --git a/terraform/modules/google_iam/locals.tf b/terraform/modules/google_iam/locals.tf
@@ -4,6 +4,7 @@ locals {
     "roles/pubsub.editor",
     "roles/iam.serviceAccountOpenIdTokenCreator",
     "roles/monitoring.dashboardViewer",
-    "roles/container.nodeServiceAccount"
+    "roles/container.nodeServiceAccount",
+    "roles/cloudtrace.agent"
   ])
 }

Original file line number	Diff line number	Diff line change
`@@ -4,6 +4,7 @@ locals {`
`4`	`4`	`"roles/pubsub.editor",`
`5`	`5`	`"roles/iam.serviceAccountOpenIdTokenCreator",`
`6`	`6`	`"roles/monitoring.dashboardViewer",`
`7`		`- "roles/container.nodeServiceAccount"`
	`7`	`+ "roles/container.nodeServiceAccount",`
	`8`	`+ "roles/cloudtrace.agent"`
`8`	`9`	`])`
`9`	`10`	`}`