Korekta uprawnien

[skibinstein]

No description provided.

[github-actions]

Project: kj-pola-shared-prod

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

terraform
module.project_services.google_project_service.project_services["storage.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/storage.googleapis.com]
module.project_services.google_project_service.project_services["logging.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/logging.googleapis.com]
module.service_account.google_service_account.service_accounts["terraform-runner"]: Refreshing state... [id=projects/kj-pola-shared-prod/serviceAccounts/terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.project_services.google_project_service.project_services["artifactregistry.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/artifactregistry.googleapis.com]
module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/serviceusage.googleapis.com]
module.project_services.google_project_service.project_services["iam.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/iam.googleapis.com]
module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/cloudresourcemanager.googleapis.com]
module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Refreshing state... [id=kj-pola-shared-prod/monitoring.googleapis.com]
module.gh_oidc.google_iam_workload_identity_pool.main: Refreshing state... [id=projects/kj-pola-shared-prod/locations/global/workloadIdentityPools/github-actions-pool]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/iam.serviceAccountUser"]: Refreshing state... [id=kj-pola-shared-prod/roles/iam.serviceAccountUser/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/viewer"]: Refreshing state... [id=kj-pola-shared-prod/roles/viewer/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/storage.objectAdmin"]: Refreshing state... [id=kj-pola-shared-prod/roles/storage.objectAdmin/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/serviceusage.serviceUsageAdmin"]: Refreshing state... [id=kj-pola-shared-prod/roles/serviceusage.serviceUsageAdmin/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/artifactregistry.writer"]: Refreshing state... [id=kj-pola-shared-prod/roles/artifactregistry.writer/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com]
module.gh_oidc.google_iam_workload_identity_pool_provider.main: Refreshing state... [id=projects/kj-pola-shared-prod/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider]
module.gh_oidc.google_service_account_iam_member.wif-sa["terraform-runner"]: Refreshing state... [id=projects/kj-pola-shared-prod/serviceAccounts/terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/802307596796/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/KlubJagiellonski/pola-terraform]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
  - destroy

Terraform will perform the following actions:

  # module.docker_registry.google_artifact_registry_repository.repo will be created
  + resource "google_artifact_registry_repository" "repo" {
      + cleanup_policy_dry_run = false
      + create_time            = (known after apply)
      + description            = "Rejestr Docker dla obrazów kontenerowych Pola backend"
      + effective_labels       = {
          + "goog-terraform-provisioned" = "true"
        }
      + format                 = "DOCKER"
      + id                     = (known after apply)
      + location               = "europe-central2"
      + mode                   = "STANDARD_REPOSITORY"
      + name                   = (known after apply)
      + project                = "kj-pola-shared-prod"
      + registry_uri           = (known after apply)
      + repository_id          = "pola-backend"
      + terraform_labels       = {
          + "goog-terraform-provisioned" = "true"
        }
      + update_time            = (known after apply)

      + vulnerability_scanning_config (known after apply)
    }

  # module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/artifactregistry.admin"] will be created
  + resource "google_project_iam_member" "project-roles" {
      + etag    = (known after apply)
      + id      = (known after apply)
      + member  = "serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com"
      + project = "kj-pola-shared-prod"
      + role    = "roles/artifactregistry.admin"
    }

  # module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-shared-prod=>roles/artifactregistry.writer"] will be destroyed
  # (because key ["terraform-runner-kj-pola-shared-prod=\u003eroles/artifactregistry.writer"] is not in for_each map)
  - resource "google_project_iam_member" "project-roles" {
      - etag    = "BwZI2GZf59M=" -> null
      - id      = "kj-pola-shared-prod/roles/artifactregistry.writer/serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com" -> null
      - member  = "serviceAccount:terraform-runner@kj-pola-shared-prod.iam.gserviceaccount.com" -> null
      - project = "kj-pola-shared-prod" -> null
      - role    = "roles/artifactregistry.writer" -> null
    }

Plan: 2 to add, 0 to change, 1 to destroy.

─────────────────────────────────────────────────────────────────────────────

Note: You didn't use the -out option to save this plan, so Terraform can't
guarantee to take exactly these actions if you run "terraform apply" now.

Pusher: @skibinstein, Action: pull_request, Working Directory: stacks/projects/kj-pola-shared-prod, Workflow: Terraform

[github-actions]

Project: kj-pola-web-stg

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

terraform
module.gh_oidc.google_iam_workload_identity_pool.main: Refreshing state... [id=projects/kj-pola-web-stg/locations/global/workloadIdentityPools/github-actions-pool]
module.project_services.google_project_service.project_services["iam.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/iam.googleapis.com]
module.project_services.google_project_service.project_services["logging.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/logging.googleapis.com]
module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/cloudresourcemanager.googleapis.com]
module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/monitoring.googleapis.com]
module.project_services.google_project_service.project_services["storage.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/storage.googleapis.com]
module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Refreshing state... [id=kj-pola-web-stg/serviceusage.googleapis.com]
module.service_account.google_service_account.service_accounts["terraform-runner"]: Refreshing state... [id=projects/kj-pola-web-stg/serviceAccounts/terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-stg=>roles/storage.objectAdmin"]: Refreshing state... [id=kj-pola-web-stg/roles/storage.objectAdmin/serviceAccount:terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-stg=>roles/iam.serviceAccountUser"]: Refreshing state... [id=kj-pola-web-stg/roles/iam.serviceAccountUser/serviceAccount:terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-stg=>roles/serviceusage.serviceUsageAdmin"]: Refreshing state... [id=kj-pola-web-stg/roles/serviceusage.serviceUsageAdmin/serviceAccount:terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-stg=>roles/viewer"]: Refreshing state... [id=kj-pola-web-stg/roles/viewer/serviceAccount:terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com]
module.gh_oidc.google_iam_workload_identity_pool_provider.main: Refreshing state... [id=projects/kj-pola-web-stg/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider]
module.gh_oidc.google_service_account_iam_member.wif-sa["terraform-runner"]: Refreshing state... [id=projects/kj-pola-web-stg/serviceAccounts/terraform-runner@kj-pola-web-stg.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/345026739965/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/KlubJagiellonski/pola-terraform]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

Pusher: @skibinstein, Action: pull_request, Working Directory: stacks/projects/kj-pola-web-stg, Workflow: Terraform

[github-actions]

Project: kj-pola-backend-stg

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
module.project_services.google_project_service.project_services["sqladmin.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/sqladmin.googleapis.com]
module.service_account.google_service_account.service_accounts["terraform-runner"]: Refreshing state... [id=projects/kj-pola-backend-stg/serviceAccounts/terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.project_services.google_project_service.project_services["storage.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/storage.googleapis.com]
module.project_services.google_project_service.project_services["run.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/run.googleapis.com]
module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/cloudresourcemanager.googleapis.com]
module.project_services.google_project_service.project_services["iam.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/iam.googleapis.com]
module.project_services.google_project_service.project_services["compute.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/compute.googleapis.com]
module.project_services.google_project_service.project_services["logging.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/logging.googleapis.com]
module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/monitoring.googleapis.com]
module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Refreshing state... [id=kj-pola-backend-stg/serviceusage.googleapis.com]
module.gh_oidc.google_iam_workload_identity_pool.main: Refreshing state... [id=projects/kj-pola-backend-stg/locations/global/workloadIdentityPools/github-actions-pool]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/run.admin"]: Refreshing state... [id=kj-pola-backend-stg/roles/run.admin/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/artifactregistry.reader"]: Refreshing state... [id=kj-pola-backend-stg/roles/artifactregistry.reader/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/iam.serviceAccountUser"]: Refreshing state... [id=kj-pola-backend-stg/roles/iam.serviceAccountUser/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/serviceusage.serviceUsageAdmin"]: Refreshing state... [id=kj-pola-backend-stg/roles/serviceusage.serviceUsageAdmin/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/storage.objectAdmin"]: Refreshing state... [id=kj-pola-backend-stg/roles/storage.objectAdmin/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/cloudsql.admin"]: Refreshing state... [id=kj-pola-backend-stg/roles/cloudsql.admin/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/compute.networkAdmin"]: Refreshing state... [id=kj-pola-backend-stg/roles/compute.networkAdmin/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-stg=>roles/viewer"]: Refreshing state... [id=kj-pola-backend-stg/roles/viewer/serviceAccount:terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com]
module.gh_oidc.google_iam_workload_identity_pool_provider.main: Refreshing state... [id=projects/kj-pola-backend-stg/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider]
module.gh_oidc.google_service_account_iam_member.wif-sa["terraform-runner"]: Refreshing state... [id=projects/kj-pola-backend-stg/serviceAccounts/terraform-runner@kj-pola-backend-stg.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/901165314592/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/KlubJagiellonski/pola-terraform]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

Pusher: @skibinstein, Action: pull_request, Working Directory: stacks/projects/kj-pola-backend-stg, Workflow: Terraform

[github-actions]

Project: kj-pola-web-prod

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
module.gh_oidc.google_iam_workload_identity_pool.main: Refreshing state... [id=projects/kj-pola-web-prod/locations/global/workloadIdentityPools/github-actions-pool]
module.project_services.google_project_service.project_services["logging.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/logging.googleapis.com]
module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/monitoring.googleapis.com]
module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/cloudresourcemanager.googleapis.com]
module.service_account.google_service_account.service_accounts["terraform-runner"]: Refreshing state... [id=projects/kj-pola-web-prod/serviceAccounts/terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com]
module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/serviceusage.googleapis.com]
module.project_services.google_project_service.project_services["storage.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/storage.googleapis.com]
module.project_services.google_project_service.project_services["iam.googleapis.com"]: Refreshing state... [id=kj-pola-web-prod/iam.googleapis.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-prod=>roles/storage.objectAdmin"]: Refreshing state... [id=kj-pola-web-prod/roles/storage.objectAdmin/serviceAccount:terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-prod=>roles/viewer"]: Refreshing state... [id=kj-pola-web-prod/roles/viewer/serviceAccount:terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-prod=>roles/iam.serviceAccountUser"]: Refreshing state... [id=kj-pola-web-prod/roles/iam.serviceAccountUser/serviceAccount:terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-web-prod=>roles/serviceusage.serviceUsageAdmin"]: Refreshing state... [id=kj-pola-web-prod/roles/serviceusage.serviceUsageAdmin/serviceAccount:terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com]
module.gh_oidc.google_iam_workload_identity_pool_provider.main: Refreshing state... [id=projects/kj-pola-web-prod/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider]
module.gh_oidc.google_service_account_iam_member.wif-sa["terraform-runner"]: Refreshing state... [id=projects/kj-pola-web-prod/serviceAccounts/terraform-runner@kj-pola-web-prod.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/288124577198/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/KlubJagiellonski/pola-terraform]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.

Pusher: @skibinstein, Action: pull_request, Working Directory: stacks/projects/kj-pola-web-prod, Workflow: Terraform

[github-actions]

Project: kj-pola-backend-prod

Terraform Format and Style 🖌success

Terraform Initialization ⚙️success

Terraform Validation 🤖success

Terraform Plan 📖success

Show Plan

terraform
Acquiring state lock. This may take a few moments...
module.project_services.google_project_service.project_services["monitoring.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/monitoring.googleapis.com]
module.gh_oidc.google_iam_workload_identity_pool.main: Refreshing state... [id=projects/kj-pola-backend-prod/locations/global/workloadIdentityPools/github-actions-pool]
module.service_account.google_service_account.service_accounts["terraform-runner"]: Refreshing state... [id=projects/kj-pola-backend-prod/serviceAccounts/terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com]
module.project_services.google_project_service.project_services["cloudresourcemanager.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/cloudresourcemanager.googleapis.com]
module.project_services.google_project_service.project_services["logging.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/logging.googleapis.com]
module.project_services.google_project_service.project_services["serviceusage.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/serviceusage.googleapis.com]
module.project_services.google_project_service.project_services["storage.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/storage.googleapis.com]
module.project_services.google_project_service.project_services["iam.googleapis.com"]: Refreshing state... [id=kj-pola-backend-prod/iam.googleapis.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-prod=>roles/storage.objectAdmin"]: Refreshing state... [id=kj-pola-backend-prod/roles/storage.objectAdmin/serviceAccount:terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-prod=>roles/serviceusage.serviceUsageAdmin"]: Refreshing state... [id=kj-pola-backend-prod/roles/serviceusage.serviceUsageAdmin/serviceAccount:terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-prod=>roles/iam.serviceAccountUser"]: Refreshing state... [id=kj-pola-backend-prod/roles/iam.serviceAccountUser/serviceAccount:terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com]
module.service_account.google_project_iam_member.project-roles["terraform-runner-kj-pola-backend-prod=>roles/viewer"]: Refreshing state... [id=kj-pola-backend-prod/roles/viewer/serviceAccount:terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com]
module.gh_oidc.google_iam_workload_identity_pool_provider.main: Refreshing state... [id=projects/kj-pola-backend-prod/locations/global/workloadIdentityPools/github-actions-pool/providers/github-actions-provider]
module.gh_oidc.google_service_account_iam_member.wif-sa["terraform-runner"]: Refreshing state... [id=projects/kj-pola-backend-prod/serviceAccounts/terraform-runner@kj-pola-backend-prod.iam.gserviceaccount.com/roles/iam.workloadIdentityUser/principalSet://iam.googleapis.com/projects/306379713727/locations/global/workloadIdentityPools/github-actions-pool/attribute.repository/KlubJagiellonski/pola-terraform]

No changes. Your infrastructure matches the configuration.

Terraform has compared your real infrastructure against your configuration
and found no differences, so no changes are needed.
Releasing state lock. This may take a few moments...

Pusher: @skibinstein, Action: pull_request, Working Directory: stacks/projects/kj-pola-backend-prod, Workflow: Terraform