Merge pull request #41 from populationgenomics/artifact-registry

Add Artifact Registry permissions for the batch-agent service account
daniel-goldstein · Feb 18, 2021 · f658d8a · f658d8a
2 parents 9b94a33 + b8ad36f
commit f658d8a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/infra/main.tf b/infra/main.tf
@@ -338,6 +338,14 @@ resource "google_artifact_registry_repository_iam_member" "artifact_registry_pul
   member = "serviceAccount:${google_service_account.gcr_pull.email}"
 }
 
+resource "google_artifact_registry_repository_iam_member" "artifact_registry_batch_agent_viewer" {
+  provider = google-beta
+  repository = google_artifact_registry_repository.repository.name
+  location = var.gcp_location
+  role = "roles/artifactregistry.reader"
+  member = "serviceAccount:${google_service_account.batch_agent.email}"
+}
+
 resource "google_artifact_registry_repository_iam_member" "artifact_registry_ci_viewer" {
   provider = google-beta
   repository = google_artifact_registry_repository.repository.name