From bfc40f4d3aa430f28cec9c68b628df983601810e Mon Sep 17 00:00:00 2001 From: Bob Callaway Date: Wed, 3 Jul 2024 10:08:00 -0700 Subject: [PATCH] enable osconfig API (#1165) Signed-off-by: Bob Callaway --- terraform/gcp/modules/bastion/bastion.tf | 1 + 1 file changed, 1 insertion(+) diff --git a/terraform/gcp/modules/bastion/bastion.tf b/terraform/gcp/modules/bastion/bastion.tf index 7ca08dde3..3027a71df 100644 --- a/terraform/gcp/modules/bastion/bastion.tf +++ b/terraform/gcp/modules/bastion/bastion.tf @@ -20,6 +20,7 @@ resource "google_project_service" "service" { "cloudkms.googleapis.com", // For KMS keyring and crypto key. roles/cloudkms.admin "compute.googleapis.com", // For compute firewall, instance. roles/compute.securityAdmin, roles/compute.instanceAdmin "iam.googleapis.com", // For creating service accounts and access control. roles/iam.serviceAccountAdmin + "osconfig.googleapis.com", // For using OS Config API (patching) ]) service = each.key