fix(tf): allow build SA to read AR

GoogleCloudPlatform · Oct 31, 2024 · 6f6b79c · 6f6b79c
1 parent dc01699
commit 6f6b79c
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/terraform/modules/autoscaler-base/main.tf b/terraform/modules/autoscaler-base/main.tf
@@ -61,6 +61,7 @@ resource "google_service_account" "build_sa" {
 
 resource "google_project_iam_member" "build_iam" {
   for_each = toset([
+    "roles/artifactregistry.reader",
     "roles/artifactregistry.writer",
     "roles/logging.logWriter",
     "roles/storage.objectViewer",