fix lint issue

Author: Zheng Qin

.terraform.lock

@@ -336,13 +336,13 @@ spec:
     roles:
       - level: Project
         roles:
-          - roles/storage.admin
-          - roles/compute.admin
           - roles/run.admin
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
           - roles/iam.serviceAccountAdmin
+          - roles/storage.admin
+          - roles/compute.admin
     services:
       - certificatemanager.googleapis.com
       - cloudresourcemanager.googleapis.com

metadata.yaml

@@ -323,22 +323,12 @@ spec:
     roles:
       - level: Project
         roles:
-          - roles/vpcaccess.admin
           - roles/iam.serviceAccountAdmin
-          - roles/storage.admin
           - roles/compute.admin
-          - roles/run.admin
           - roles/iam.serviceAccountUser
-          - roles/certificatemanager.owner
     services:
-      - certificatemanager.googleapis.com
       - cloudresourcemanager.googleapis.com
       - compute.googleapis.com
-      - iam.googleapis.com
-      - run.googleapis.com
-      - serviceusage.googleapis.com
-      - storage-api.googleapis.com
-      - vpcaccess.googleapis.com
     providerVersions:
       - source: hashicorp/google
         version: ">= 6.0, < 7"

modules/backend/metadata.yaml

@@ -328,13 +328,13 @@ spec:
     roles:
       - level: Project
         roles:
+          - roles/storage.admin
+          - roles/compute.admin
           - roles/run.admin
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
           - roles/iam.serviceAccountAdmin
-          - roles/storage.admin
-          - roles/compute.admin
     services:
       - certificatemanager.googleapis.com
       - cloudresourcemanager.googleapis.com

modules/dynamic_backends/metadata.yaml

@@ -236,22 +236,11 @@ spec:
     roles:
       - level: Project
         roles:
-          - roles/iam.serviceAccountAdmin
-          - roles/storage.admin
+          - roles/compute.loadBalancerAdmin
           - roles/compute.admin
-          - roles/run.admin
-          - roles/iam.serviceAccountUser
-          - roles/certificatemanager.owner
-          - roles/vpcaccess.admin
     services:
       - certificatemanager.googleapis.com
-      - cloudresourcemanager.googleapis.com
       - compute.googleapis.com
-      - iam.googleapis.com
-      - run.googleapis.com
-      - serviceusage.googleapis.com
-      - storage-api.googleapis.com
-      - vpcaccess.googleapis.com
     providerVersions:
       - source: hashicorp/google
         version: ">= 6.0, < 7"

modules/frontend/metadata.yaml

@@ -292,13 +292,13 @@ spec:
     roles:
       - level: Project
         roles:
+          - roles/iam.serviceAccountAdmin
+          - roles/storage.admin
+          - roles/compute.admin
           - roles/run.admin
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountAdmin
-          - roles/storage.admin
-          - roles/compute.admin
     services:
       - certificatemanager.googleapis.com
       - cloudresourcemanager.googleapis.com

modules/serverless_negs/metadata.yaml

@@ -26,12 +26,8 @@ locals {
       "roles/iam.serviceAccountAdmin"
     ]
     backend = [
-      "roles/storage.admin",
       "roles/compute.admin",
-      "roles/run.admin",
       "roles/iam.serviceAccountUser",
-      "roles/certificatemanager.owner",
-      "roles/vpcaccess.admin",
       "roles/iam.serviceAccountAdmin"
     ]
     dynamic_backends = [
@@ -44,13 +40,8 @@ locals {
       "roles/iam.serviceAccountAdmin"
     ]
     frontend = [
-      "roles/storage.admin",
       "roles/compute.admin",
-      "roles/run.admin",
-      "roles/iam.serviceAccountUser",
-      "roles/certificatemanager.owner",
-      "roles/vpcaccess.admin",
-      "roles/iam.serviceAccountAdmin"
+      "roles/compute.loadBalancerAdmin",
     ]
     serverless_negs = [
       "roles/storage.admin",

test/setup/iam.tf

@@ -27,14 +27,8 @@ locals {
       "vpcaccess.googleapis.com",
     ]
     backend = [
-      "cloudresourcemanager.googleapis.com",
-      "storage-api.googleapis.com",
-      "serviceusage.googleapis.com",
       "compute.googleapis.com",
-      "run.googleapis.com",
-      "iam.googleapis.com",
-      "certificatemanager.googleapis.com",
-      "vpcaccess.googleapis.com",
+      "cloudresourcemanager.googleapis.com",
     ]
     dynamic_backends = [
       "cloudresourcemanager.googleapis.com",
@@ -47,14 +41,8 @@ locals {
       "vpcaccess.googleapis.com",
     ]
     frontend = [
-      "cloudresourcemanager.googleapis.com",
-      "storage-api.googleapis.com",
-      "serviceusage.googleapis.com",
       "compute.googleapis.com",
-      "run.googleapis.com",
-      "iam.googleapis.com",
       "certificatemanager.googleapis.com",
-      "vpcaccess.googleapis.com",
     ]
     serverless_negs = [
       "cloudresourcemanager.googleapis.com",