fix: compute.network.get permissions for destroying inception

GaloyMoney · Oct 17, 2023 · 3a4f30f · 3a4f30f
1 parent 04a6d63
commit 3a4f30f
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 1 deletion.
diff --git a/modules/bootstrap/gcp/inception-account.tf b/modules/bootstrap/gcp/inception-account.tf
@@ -33,6 +33,7 @@ resource "google_project_iam_custom_role" "bootstrap" {
     "compute.firewalls.delete",
     "compute.instances.delete",
     "compute.instances.deleteAccessConfig",
+    "compute.networks.get",
     "compute.networks.delete",
     "compute.subnetworks.delete",
     "iam.serviceAccounts.delete",

diff --git a/modules/inception/gcp/inception-roles.tf b/modules/inception/gcp/inception-roles.tf
@@ -58,7 +58,6 @@ resource "google_project_iam_custom_role" "inception_destroy" {
     "compute.instances.delete",
     "compute.instances.deleteAccessConfig",
     "compute.routers.delete",
-    "compute.networks.get",
     "compute.networks.delete",
     "compute.subnetworks.delete",
     "compute.globalAddresses.deleteInternal",