Merge pull request #16 from rcwbr/14-apply-step-fails-due-to-permissi…

…on-forbidden fix: grant apply required roles
rcwbr · Oct 9, 2024 · 769214a · 769214a
2 parents 2b7bd64 + c0aa992
commit 769214a
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/variables.tf b/variables.tf
@@ -2,8 +2,10 @@ variable "apply_action_project_roles" {
   type = list(string)
   default = [
     "roles/iam.serviceAccountAdmin",
-    "roles/storage.admin",
-    "roles/iam.workloadIdentityPoolAdmin"
+    "roles/iam.workloadIdentityPoolAdmin",
+    "roles/resourcemanager.projectIamAdmin",
+    "roles/serviceusage.serviceUsageAdmin",
+    "roles/storage.admin"
   ]
   description = "The list of project-wide roles to grant apply actions"
 }