diff --git a/main.tf b/main.tf index 416d27e..c181fb6 100644 --- a/main.tf +++ b/main.tf @@ -138,6 +138,8 @@ locals { "iam.serviceAccounts.get", "iam.serviceAccounts.list", "resourcemanager.projects.get", + # @memes added 3/29/24 + "compute.projects.get", ], var.target_type == "org" ? [ "resourcemanager.projects.list", diff --git a/test/profiles/f5-xc-role/controls/role.rb b/test/profiles/f5-xc-role/controls/role.rb index 9b58ce0..9947f22 100644 --- a/test/profiles/f5-xc-role/controls/role.rb +++ b/test/profiles/f5-xc-role/controls/role.rb @@ -113,7 +113,9 @@ 'iam.serviceAccounts.actAs', 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', - 'resourcemanager.projects.get' + 'resourcemanager.projects.get', + # @memes added 3/29/24 + 'compute.projects.get' ].sort!.freeze EXPECTED_ORG_PERMISSIONS = [ @@ -230,7 +232,9 @@ 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.projects.get', - 'resourcemanager.projects.list' + 'resourcemanager.projects.list', + # @memes added 3/29/24 + 'compute.projects.get' ].sort!.freeze control 'project_role' do