read state

transparency-dev · Aug 30, 2024 · d31852d · d31852d
1 parent 5ab1a96
commit d31852d
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/deployment/modules/gcp/cloudbuild/main.tf b/deployment/modules/gcp/cloudbuild/main.tf
@@ -86,6 +86,7 @@ resource "google_cloudbuild_trigger" "docker" {
         "plan",
         "--terragrunt-include-dir", "./deployment/live/gcp/*/*/",
         "--terragrunt-disable-bucket-update",
+        "--lock=false"
       ]
       env = [
         "TF_IN_AUTOMATION=1",
@@ -128,3 +129,9 @@ resource "google_project_iam_member" "cloudrun_deployer" {
   role    = "roles/run.developer"
   member  = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"
 }
+
+resource "google_storage_bucket_iam_member" "member" {
+  bucket   = "${var.project_id}-cloudbuild-${var.env}-terraform-state"
+  role = "roles/storage.objectViewer"
+  member = "serviceAccount:${google_service_account.cloudbuild_service_account.email}"
+}