fix: Give accounts service account admin to allow google integration

Author: jsbroks

modules/helm_release/main.tf

@@ -5,10 +5,10 @@ locals {
   }
 
   image_tags = {
-    "migrations.image.tag"         = "933eea0",
-    "webservice.image.tag"         = "933eea0",
-    "event-worker.image.tag"       = "876d342",
-    "job-policy-checker.image.tag" = "933eea0",
+    "migrations.image.tag"         = "170058e",
+    "webservice.image.tag"         = "99bd4ae",
+    "event-worker.image.tag"       = "170058e",
+    "job-policy-checker.image.tag" = "170058e",
   }
 
   postgres_settings = {

modules/service_accounts/main.tf

@@ -17,9 +17,9 @@ resource "google_project_iam_member" "cloudsql_client" {
   member  = local.sa_member
 }
 
-resource "google_project_iam_member" "sa_creator" {
+resource "google_project_iam_member" "sa_admin" {
   project = local.project_id
-  role    = "roles/iam.serviceAccountCreator"
+  role    = "roles/iam.serviceAccountAdmin"
   member  = local.sa_member
 }