fix: always grant view permissions at org to CB SA for TFV (#645)

terraform-google-modules · Mar 8, 2022 · 66d4c5b · 66d4c5b
1 parent 235698b
commit 66d4c5b
Showing 1 changed file with 0 additions and 8 deletions.
diff --git a/0-bootstrap/main.tf b/0-bootstrap/main.tf
@@ -177,19 +177,11 @@ data "google_project" "cloudbuild" {
 }
 
 resource "google_organization_iam_member" "org_cb_sa_iam_viewer" {
-  count  = var.parent_folder == "" ? 1 : 0
   org_id = var.org_id
   role   = "roles/iam.securityReviewer"
   member = "serviceAccount:${data.google_project.cloudbuild.number}@cloudbuild.gserviceaccount.com"
 }
 
-resource "google_folder_iam_member" "org_cb_sa_iam_viewer" {
-  count  = var.parent_folder != "" ? 1 : 0
-  folder = var.parent_folder
-  role   = "roles/iam.securityReviewer"
-  member = "serviceAccount:${data.google_project.cloudbuild.number}@cloudbuild.gserviceaccount.com"
-}
-
 resource "google_organization_iam_member" "org_cb_sa_browser" {
   count  = var.parent_folder == "" ? 1 : 0
   org_id = var.org_id