Temporarily allow SREs to manage zone relaycorp.cloud

relaycorp · Jan 18, 2024 · 24d8112 · 24d8112
1 parent 073bce1
commit 24d8112
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/tf-workspace/dns.tf b/tf-workspace/dns.tf
@@ -10,3 +10,11 @@ resource "google_dns_managed_zone" "relaycorp_services" {
 
   depends_on = [google_project_service.dns]
 }
+
+// TODO: Remove
+resource "google_dns_managed_zone_iam_member" "member" {
+  project      = var.gcp_project_id
+  managed_zone = "relaycorp-cloud"
+  role         = "roles/dns.admin"
+  member       = var.sre_iam_uri
+}