feat: additional permissions

Author: prabhu34

test/setup/iam.tf

@@ -55,3 +55,15 @@ resource "google_project_iam_member" "int_test_service_project_iam" {
 resource "google_service_account_key" "int_test" {
   service_account_id = google_service_account.int_test.id
 }
+
+resource "google_project_iam_member" "service_composer_agent_service_account" {
+  project = module.service_project.project_id
+  role    = "roles/composer.ServiceAgentV2Ext"
+  member  = format("serviceAccount:service-%[email protected]", module.service_project.project_number)
+}
+
+resource "google_project_iam_member" "host_composer_agent_service_account" {
+  project = module.project.project_id
+  role    = "roles/composer.sharedVpcAgent"
+  member  = format("serviceAccount:service-%[email protected]", module.service_project.project_number)
+}

test/setup/main.tf

@@ -67,6 +67,10 @@ module "service_project" {
     {
       api   = "container.googleapis.com"
       roles = ["roles/container.serviceAgent"]
+    },
+    {
+      api   = "container.googleapis.com"
+      roles = ["roles/composer.sharedVpcAgent"]
     }
   ]
   disable_dependent_services  = false