Remove objectViewer from list of default service account roles

gruntwork-io · Aug 30, 2019 · 7ae4c68 · 7ae4c68
1 parent d3617ee
commit 7ae4c68
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/modules/gke-service-account/main.tf b/modules/gke-service-account/main.tf
@@ -26,8 +26,7 @@ locals {
     "roles/logging.logWriter",
     "roles/monitoring.metricWriter",
     "roles/monitoring.viewer",
-    "roles/stackdriver.resourceMetadata.writer",
-    "roles/storage.objectViewer"
+    "roles/stackdriver.resourceMetadata.writer"
   ])
 }