Fix hidden transfer SA definition

lsst · Feb 28, 2024 · 891e70a · 891e70a
1 parent 3629dd1
commit 891e70a
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/environment/deployments/roundtable/main.tf b/environment/deployments/roundtable/main.tf
@@ -150,19 +150,19 @@ data "google_storage_transfer_project_service_account" "vault_backup_transfer_sa
 resource "google_storage_bucket_iam_member" "vault_server_storage_transfer_source_sa" {
   bucket  = module.storage_bucket.name
   role    = "roles/storage.objectViewer"
-  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa}.iam.gserviceaccount.com"
+  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa.email}"
 }
 
 resource "google_storage_bucket_iam_member" "vault_server_storage_transfer_source_sa_r" {
   bucket  = module.storage_bucket.name
   role    = "roles/storage.legacyBucketReader"
-  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa}.iam.gserviceaccount.com"
+  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa.email}"
 }
 
 resource "google_storage_bucket_iam_member" "vault_server_storage_transfer_sink_sa" {
   bucket  = module.storage_bucket_b.name
   role    = "roles/storage.legacyBucketWriter"
-  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa}.iam.gserviceaccount.com"
+  member  = "serviceAccount:${data.google_storage_transfer_project_service_account.vault_backup_transfer_sa.email}"
 }
 
 resource "google_storage_bucket_iam_member" "vault_server_storage_transfer_sink_sa_r" {