From 24d8112b23697e4727e24b5e15c488f781d65dd9 Mon Sep 17 00:00:00 2001
From: Gus Narea <gnarea@users.noreply.github.com>
Date: Thu, 18 Jan 2024 22:50:30 +0000
Subject: [PATCH] Temporarily allow SREs to manage zone `relaycorp.cloud`

---
 tf-workspace/dns.tf | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/tf-workspace/dns.tf b/tf-workspace/dns.tf
index 6383c73..6f7ab72 100644
--- a/tf-workspace/dns.tf
+++ b/tf-workspace/dns.tf
@@ -10,3 +10,11 @@ resource "google_dns_managed_zone" "relaycorp_services" {
 
   depends_on = [google_project_service.dns]
 }
+
+// TODO: Remove
+resource "google_dns_managed_zone_iam_member" "member" {
+  project      = var.gcp_project_id
+  managed_zone = "relaycorp-cloud"
+  role         = "roles/dns.admin"
+  member       = var.sre_iam_uri
+}