Fix #414: Use exact match for roles/editor in removing default binding (

#415)
terraform-google-modules · May 7, 2020 · b7246ee · b7246ee
1 parent 8511343
commit b7246ee
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/modules/core_project_factory/scripts/modify-service-account.sh b/modules/core_project_factory/scripts/modify-service-account.sh
@@ -77,7 +77,7 @@ deprivilege_sa() {
   EDITORS_LIST_COMMAND="gcloud projects get-iam-policy $PROJECT_ID \
   --flatten=bindings[].members \
   --format=table(bindings.role,bindings.members) \
-  --filter=bindings.role:editor $APPEND_IMPERSONATE"
+  --filter=bindings.role:roles/editor $APPEND_IMPERSONATE"
   EDITORS_LIST=$(${EDITORS_LIST_COMMAND} || exit 1)
 
   if [[ $EDITORS_LIST = *"$SA_ID"* ]]; then