From 3c46a368933eaff2bcbe00c3e7d08dcb1cda499e Mon Sep 17 00:00:00 2001
From: matteopasa <matteo.pasina@sysdig.com>
Date: Thu, 15 May 2025 16:24:23 +0200
Subject: [PATCH] add permissions to read metrics

---
 modules/integrations/pub-sub/main.tf           | 1 +
 modules/integrations/pub-sub/organizational.tf | 1 +
 2 files changed, 2 insertions(+)

diff --git a/modules/integrations/pub-sub/main.tf b/modules/integrations/pub-sub/main.tf
index fd028f3..c18a551 100644
--- a/modules/integrations/pub-sub/main.tf
+++ b/modules/integrations/pub-sub/main.tf
@@ -218,6 +218,7 @@ resource "google_project_iam_custom_role" "custom_ingestion_auth_role" {
     "pubsub.subscriptions.list",
     "logging.sinks.get",
     "logging.sinks.list",
+    "monitoring.timeSeries.list",
   ]
 }
 
diff --git a/modules/integrations/pub-sub/organizational.tf b/modules/integrations/pub-sub/organizational.tf
index bf26105..aab3de1 100644
--- a/modules/integrations/pub-sub/organizational.tf
+++ b/modules/integrations/pub-sub/organizational.tf
@@ -73,6 +73,7 @@ resource "google_organization_iam_custom_role" "custom_ingestion_auth_role" {
     "pubsub.subscriptions.list",
     "logging.sinks.get",
     "logging.sinks.list",
+    "monitoring.timeSeries.list",
   ]
 }