fix storage role for projects SA

Author: renato-rudnicki

4-projects/business_unit_1/shared/example_infra_pipeline.tf

@@ -71,6 +71,12 @@ resource "google_storage_bucket_iam_member" "cloudbuild_sa_storage_admin" {
   member = "serviceAccount:tf-cb-builder-sa@${local.cloudbuild_project_id}.iam.gserviceaccount.com"
 }
 
+resource "google_storage_bucket_iam_member" "projects_bucket_admin" {
+  bucket = "${local.cloudbuild_project_id}_cloudbuild"
+  role   = "roles/storage.admin"
+  member = "serviceAccount:${local.projects_terraform_sa}"
+}
+
 resource "google_storage_bucket_iam_member" "cloudbuild_bucket_admin" {
   bucket = "${local.cloudbuild_project_id}_cloudbuild"
   role   = "roles/storage.admin"
@@ -134,6 +140,7 @@ resource "time_sleep" "wait_iam_propagation" {
     google_project_iam_member.cloudbuild_logging,
     google_storage_bucket_iam_member.cloudbuild_sa_storage_admin,
     google_storage_bucket_iam_member.cloudbuild_bucket_admin,
+    google_storage_bucket_iam_member.projects_bucket_admin,
   ]
 }