From 5b77732f2bcc9da8af4fcd04386542e4588fa464 Mon Sep 17 00:00:00 2001
From: Bob Callaway <bobcallaway@users.noreply.github.com>
Date: Thu, 20 Jun 2024 11:11:20 -0400
Subject: [PATCH] add cloudsql.client role to trillian SA (#1146)

Signed-off-by: Bob Callaway <bcallaway@google.com>
---
 terraform/gcp/modules/mysql/mysql.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/terraform/gcp/modules/mysql/mysql.tf b/terraform/gcp/modules/mysql/mysql.tf
index dfba2fbff..15f0e00ee 100644
--- a/terraform/gcp/modules/mysql/mysql.tf
+++ b/terraform/gcp/modules/mysql/mysql.tf
@@ -83,6 +83,7 @@ resource "google_project_iam_member" "logserver_iam" {
     "roles/logging.logWriter",
     "roles/monitoring.metricWriter",
     "roles/stackdriver.resourceMetadata.writer",
+    "roles/cloudsql.client",
     "roles/cloudtrace.agent"
   ])
   project    = var.project_id