alphagov / govuk-infrastructure

Terraform turnup automation for the EKS Kubernetes clusters that host GOV.UK. See https://github.com/alphagov/govuk-helm-charts for application config.
MIT License
138 stars 24 forks source link

Use google_project_iam_member instead of google_project_iam_binding for TFC service account config #1389

Closed samsimpson1 closed 1 month ago

samsimpson1 commented 1 month ago

Using google_project_iam_binding causes terraform to remove the role from all other users/groups, including the govuk-gcp-access group so nobody could access these projects. Oops.