added job creator role and remove secrets manager role

[kevinsunny1996]

No description provided.

[github-actions]

Infracost report

💰 Monthly cost will not change

_{This comment will be updated when code changes.}

[github-actions]

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖``

Terraform Plan 📖success

Show Plan

terraform
module.gcs_api_extract.random_id.bucket_suffix: Refreshing state... [id=i_k]
google_project_iam_binding.gsm_access: Refreshing state... [id=exemplary-tide-379122/roles/secretmanager.secretAccessor]
google_project_service.compute_api: Refreshing state... [id=exemplary-tide-379122/compute.googleapis.com]
google_service_account.airflow_user_sa: Refreshing state... [id=projects/exemplary-tide-379122/serviceAccounts/[email protected]]
google_project_service.composer_api: Refreshing state... [id=exemplary-tide-379122/composer.googleapis.com]
data.google_client_config.default: Reading...
google_project_service.cloud_sql_api: Refreshing state... [id=exemplary-tide-379122/sqladmin.googleapis.com]
google_project_service.secret_mgr_api: Refreshing state... [id=exemplary-tide-379122/secretmanager.googleapis.com]
google_project_service.container_api: Refreshing state... [id=exemplary-tide-379122/container.googleapis.com]
google_bigquery_dataset.rawg_api_dataset: Refreshing state... [id=projects/exemplary-tide-379122/datasets/rawg_api_elt_dataset]
module.gcs_api_extract.google_storage_bucket.buckets["rawg-api-extracts"]: Refreshing state... [id=pricing-aggregator-us-east1-rawg-api-extracts]
data.google_client_config.default: Read complete after 0s [id=projects/"exemplary-tide-379122"/regions/"us-east1"/zones/<null>]
module.gcs_api_extract.google_storage_bucket_iam_binding.admins["rawg-api-extracts"]: Refreshing state... [id=b/pricing-aggregator-us-east1-rawg-api-extracts/roles/storage.objectAdmin]
google_project_iam_binding.bq_access: Refreshing state... [id=exemplary-tide-379122/roles/bigquery.dataEditor]
google_project_iam_binding.gcs_access: Refreshing state... [id=exemplary-tide-379122/roles/storage.objectAdmin]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  - destroy

Terraform will perform the following actions:

  # google_project_iam_binding.bq_job_creator will be created
  + resource "google_project_iam_binding" "bq_job_creator" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + members = [
          + "serviceAccount:[email protected]",
        ]
      + project = (sensitive value)
      + role    = "roles/bigquery.jobUser"
    }

  # google_project_iam_binding.gsm_access will be destroyed
  # (because google_project_iam_binding.gsm_access is not in configuration)
  - resource "google_project_iam_binding" "gsm_access" {
      - etag    = "BwYJBtFItao=" -> null
      - id      = "exemplary-tide-379122/roles/secretmanager.secretAccessor" -> null
      - members = [
          - "serviceAccount:[email protected]",
        ] -> null
      - project = (sensitive value) -> null
      - role    = "roles/secretmanager.secretAccessor" -> null
    }

Plan: 1 to add, 0 to change, 1 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pushed by: @kevinsunny1996, Action: pull_request