Skip to content

Commit a05d7b7

Browse files
mattbeejoates-madetechmaysakanonielena-vi
committed
Remove admin role assignment to Google Project
We think that by changing the IAM roles attached to a project might be interfering with the ability to create resources, so we are trying without setting these users. In reality there should be no reason for specific engineers to need to access the project once created. Co-authored-by: joates-madetech <james.oates@madetech.com> Co-authored-by: maysakanoni <maysa@madetech.com> Co-authored-by: elena-vi <elena@madetech.com>
1 parent c8c2b8a commit a05d7b7

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

terraform/40-google-platform.tf

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -5,21 +5,21 @@ resource "google_project_service" "sheets_api" {
55
disable_dependent_services = true
66
}
77

8-
data "google_iam_policy" "project_admin" {
9-
binding {
10-
role = "roles/admin"
8+
# data "google_iam_policy" "project_admin" {
9+
# binding {
10+
# role = "roles/admin"
1111

12-
members = [
13-
"user:maysa.kanoni@hackney.gov.uk",
14-
"user:matt.bee@hackney.gov.uk",
15-
"user:james.oates@hackney.gov.uk",
16-
"user:ben.dalton@hackney.gov.uk",
17-
"user:elena.vilimaite@hackney.gov.uk"
18-
]
19-
}
20-
}
12+
# members = [
13+
# "user:maysa.kanoni@hackney.gov.uk",
14+
# "user:matt.bee@hackney.gov.uk",
15+
# "user:james.oates@hackney.gov.uk",
16+
# "user:ben.dalton@hackney.gov.uk",
17+
# "user:elena.vilimaite@hackney.gov.uk"
18+
# ]
19+
# }
20+
# }
2121

22-
resource "google_project_iam_policy" "project_iam" {
23-
project = "dataplatform-stg"
24-
policy_data = data.google_iam_policy.project_admin.policy_data
25-
}
22+
# resource "google_project_iam_policy" "project_iam" {
23+
# project = "dataplatform-stg"
24+
# policy_data = data.google_iam_policy.project_admin.policy_data
25+
# }

0 commit comments

Comments
 (0)