add cloudsql.client role to trillian SA (#1146)

Signed-off-by: Bob Callaway <[email protected]>
sigstore · Jun 20, 2024 · 5b77732 · 5b77732
1 parent fb8d181
commit 5b77732
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/gcp/modules/mysql/mysql.tf b/terraform/gcp/modules/mysql/mysql.tf
@@ -83,6 +83,7 @@ resource "google_project_iam_member" "logserver_iam" {
     "roles/logging.logWriter",
     "roles/monitoring.metricWriter",
     "roles/stackdriver.resourceMetadata.writer",
+    "roles/cloudsql.client",
     "roles/cloudtrace.agent"
   ])
   project    = var.project_id