Allow multiple SAs to control DNS zone relaycorp.services

relaycorp · Jan 15, 2024 · f73a5bf · f73a5bf
1 parent ce16774
commit f73a5bf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tf-modules/environment_workspace/gcp.tf b/tf-modules/environment_workspace/gcp.tf
@@ -40,10 +40,10 @@ resource "google_project_iam_binding" "tfe_owner" {
   members = ["serviceAccount:${google_service_account.tfe.email}"]
 }
 
-resource "google_project_iam_binding" "tfe_shared_dns" {
+resource "google_project_iam_member" "tfe_shared_dns" {
   project = var.shared_infra_gcp_project_id
   role    = "roles/dns.admin"
-  members = ["serviceAccount:${google_service_account.tfe.email}"]
+  member  = "serviceAccount:${google_service_account.tfe.email}"
 }
 
 resource "google_service_account_key" "tfe" {