fix: added service account admin role

pawan1210 · pawan1210 · commit a04358e06754 · 2025-03-17T08:44:36.000Z
diff --git a/metadata.yaml b/metadata.yaml
@@ -341,7 +341,7 @@ spec:
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountCreator
+          - roles/iam.serviceAccountAdmin
     services:
       - cloudresourcemanager.googleapis.com
       - storage-api.googleapis.com
diff --git a/modules/backend/metadata.yaml b/modules/backend/metadata.yaml
@@ -308,7 +308,7 @@ spec:
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountCreator
+          - roles/iam.serviceAccountAdmin
     services:
       - cloudresourcemanager.googleapis.com
       - storage-api.googleapis.com
diff --git a/modules/dynamic_backends/metadata.yaml b/modules/dynamic_backends/metadata.yaml
@@ -333,7 +333,7 @@ spec:
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountCreator
+          - roles/iam.serviceAccountAdmin
     services:
       - cloudresourcemanager.googleapis.com
       - storage-api.googleapis.com
diff --git a/modules/frontend/metadata.yaml b/modules/frontend/metadata.yaml
@@ -230,7 +230,7 @@ spec:
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountCreator
+          - roles/iam.serviceAccountAdmin
     services:
       - cloudresourcemanager.googleapis.com
       - storage-api.googleapis.com
diff --git a/modules/serverless_negs/metadata.yaml b/modules/serverless_negs/metadata.yaml
@@ -297,7 +297,7 @@ spec:
           - roles/iam.serviceAccountUser
           - roles/certificatemanager.owner
           - roles/vpcaccess.admin
-          - roles/iam.serviceAccountCreator
+          - roles/iam.serviceAccountAdmin
     services:
       - cloudresourcemanager.googleapis.com
       - storage-api.googleapis.com
diff --git a/test/setup/iam.tf b/test/setup/iam.tf
@@ -22,7 +22,7 @@ locals {
     "roles/iam.serviceAccountUser",
     "roles/certificatemanager.owner",
     "roles/vpcaccess.admin",
-    "roles/iam.serviceAccountCreator"
+    "roles/iam.serviceAccountAdmin"
   ]
   int_required_folder_roles = [
     "roles/compute.xpnAdmin"

Original file line number	Diff line number	Diff line change
`@@ -22,7 +22,7 @@ locals {`
`22`	`22`	`"roles/iam.serviceAccountUser",`
`23`	`23`	`"roles/certificatemanager.owner",`
`24`	`24`	`"roles/vpcaccess.admin",`
`25`		`- "roles/iam.serviceAccountCreator"`
	`25`	`+ "roles/iam.serviceAccountAdmin"`
`26`	`26`	`]`
`27`	`27`	`int_required_folder_roles = [`
`28`	`28`	`"roles/compute.xpnAdmin"`