Fix missing bootstrap IAM for GKE SA to create CPA clusters. (#12962)

GoogleCloudPlatform · Feb 4, 2025 · 97b663d · 97b663d
1 parent 87af64a
commit 97b663d
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.tmpl b/mmv1/third_party/terraform/services/container/resource_container_cluster_test.go.tmpl
@@ -5633,6 +5633,10 @@ func TestAccContainerCluster_WithCPAFeatures(t *testing.T) {
 			Member: "serviceAccount:service-{project_number}@container-engine-robot.iam.gserviceaccount.com",
 			Role: "roles/cloudkms.cryptoKeyEncrypterDecrypter",
 		},
+		{
+			Member: "serviceAccount:service-{project_number}@container-engine-robot.iam.gserviceaccount.com",
+			Role: "roles/cloudkms.cryptoKeyEncrypterDecrypterViaDelegation",
+		},
 	})
 
 	// Find an active cryptoKeyVersion on the signing key.