correct service accounts

ctrlplanedev · Aug 29, 2024 · 9968a9a · 9968a9a
1 parent 9d1d69c
commit 9968a9a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/modules/service_accounts/main.tf b/modules/service_accounts/main.tf
@@ -32,6 +32,8 @@ resource "google_service_account_iam_binding" "this" {
   service_account_id = google_service_account.this.id
   role               = "roles/iam.workloadIdentityUser"
   members = [
-    "serviceAccount:${local.project_id}.svc.id.goog[default/${google_service_account.this.email}]"
+    "serviceAccount:${local.project_id}.svc.id.goog[default/ctrlplane-webservice]",
+    "serviceAccount:${local.project_id}.svc.id.goog[default/ctrlplane-job-policy-checker]",
+    "serviceAccount:${local.project_id}.svc.id.goog[default/ctrlplane-migrations]"
   ]
 }