Missing Service Account Role

[zentec]

In order for all modules to work properly for the Google Cloud Ops Agent (installed in startup.sh), a missing permission needs to be added to the service account.

resource "google_project_iam_member" "metric-writer" {
  project    = var.project_id
  role       = "roles/monitoring.metricWriter"
  member     = "serviceAccount:${google_service_account.haproxy-compute-svc.email}"
  depends_on = [google_service_account.haproxy-compute-svc]
}