fix: add missing ci-infra role for alert policies

BLMgithub · web-flow · commit d89a09891ab9 · 2026-04-11T12:37:44.000+08:00
diff --git a/.gcp/terraforms/iam_bindings.tf b/.gcp/terraforms/iam_bindings.tf
@@ -22,6 +22,7 @@ locals {
     "roles/resourcemanager.projectIamAdmin", # Manage the IAM bindings in this code
     "roles/iam.workloadIdentityPoolAdmin",   # Manage WIF in wif.tf
     "roles/monitoring.admin",                # Manage Monitoring in monitoring.tf
+    "roles/logging.configWriter",            # Required for log-based alert policies
     "roles/iam.serviceAccountAdmin",         # Manage Alert policies in monitoring.tf
     "roles/iam.admin"                        # Manage Iam roles
   ]

Original file line number	Diff line number	Diff line change
`@@ -22,6 +22,7 @@ locals {`
`22`	`22`	`"roles/resourcemanager.projectIamAdmin", # Manage the IAM bindings in this code`
`23`	`23`	`"roles/iam.workloadIdentityPoolAdmin", # Manage WIF in wif.tf`
`24`	`24`	`"roles/monitoring.admin", # Manage Monitoring in monitoring.tf`
	`25`	`+ "roles/logging.configWriter", # Required for log-based alert policies`
`25`	`26`	`"roles/iam.serviceAccountAdmin", # Manage Alert policies in monitoring.tf`
`26`	`27`	`"roles/iam.admin" # Manage Iam roles`
`27`	`28`	`]`