change roler for terraform-image-iam resource

renato-rudnicki · renato-rudnicki · commit 456592f310a1 · 2025-10-02T17:53:24.000-03:00
diff --git a/4-projects/modules/infra_pipelines/main.tf b/4-projects/modules/infra_pipelines/main.tf
@@ -106,7 +106,7 @@ resource "google_artifact_registry_repository_iam_member" "terraform-image-iam"
   project    = local.gar_project_id
   location   = local.gar_region
   repository = local.gar_name
-  role       = "roles/artifactregistry.admin"
+  role       = "roles/artifactregistry.writer"
   member     = "serviceAccount:${local.workspace_sa_email[each.key]}"
 }
 

Original file line number	Diff line number	Diff line change
`@@ -106,7 +106,7 @@ resource "google_artifact_registry_repository_iam_member" "terraform-image-iam"`
`106`	`106`	`project = local.gar_project_id`
`107`	`107`	`location = local.gar_region`
`108`	`108`	`repository = local.gar_name`
`109`		`- role = "roles/artifactregistry.admin"`
	`109`	`+ role = "roles/artifactregistry.writer"`
`110`	`110`	`member = "serviceAccount:${local.workspace_sa_email[each.key]}"`
`111`	`111`	`}`
`112`	`112`