Skip to content

Commit 1e5a711

Browse files
committed
add missing task executor permission
1 parent df6e856 commit 1e5a711

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

infra/functions-python/main.tf

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1178,6 +1178,15 @@ resource "google_cloudfunctions2_function" "tasks_executor" {
11781178
}
11791179
}
11801180

1181+
# Grant execution permission to bathcfunctions service account to the tasks_executor function
1182+
resource "google_cloudfunctions2_function_iam_member" "tasks_executor_invoker" {
1183+
project = var.project_id
1184+
location = var.gcp_region
1185+
cloud_function = google_cloudfunctions2_function.tasks_executor.name
1186+
role = "roles/cloudfunctions.invoker"
1187+
member = "serviceAccount:${local.batchfunctions_sa_email}"
1188+
}
1189+
11811190
# 15. functions/pmtiles_builder cloud function
11821191
resource "google_cloudfunctions2_function" "pmtiles_builder" {
11831192
name = "${local.function_pmtiles_builder_config.name}-${var.environment}"

0 commit comments

Comments
 (0)