fix: grant roles/billing.viewer to the seed service account in helper. (

#666)
terraform-google-modules · Dec 16, 2021 · e444e2a · e444e2a
1 parent 0370e0f
commit e444e2a
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/helpers/setup-sa.sh b/helpers/setup-sa.sh
@@ -182,6 +182,14 @@ gcloud organizations add-iam-policy-binding \
   --role="roles/billing.user" \
   --user-output-enabled false
 
+# Grant roles/billing.viewer to the service account on the organization
+echo "Adding role roles/billing.viewer..."
+gcloud organizations add-iam-policy-binding \
+  "${ORG_ID}" \
+  --member="serviceAccount:${SA_ID}" \
+  --role="roles/billing.viewer" \
+  --user-output-enabled false
+
 # Grant roles/compute.xpnAdmin to the service account on the organization
 echo "Adding role roles/compute.xpnAdmin..."
 gcloud organizations add-iam-policy-binding \