From 3489b6d77282f6c8b48cae6846fde4500a7fb943 Mon Sep 17 00:00:00 2001
From: Moritz Sanft <58110325+msanft@users.noreply.github.com>
Date: Wed, 16 Apr 2025 10:06:37 +0200
Subject: [PATCH] terraform: add missing GCP IAM permission to VM SA (#3770)

---
 terraform/infrastructure/iam/gcp/main.tf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/terraform/infrastructure/iam/gcp/main.tf b/terraform/infrastructure/iam/gcp/main.tf
index 2aaca1f08..79534472c 100644
--- a/terraform/infrastructure/iam/gcp/main.tf
+++ b/terraform/infrastructure/iam/gcp/main.tf
@@ -87,6 +87,7 @@ resource "google_project_iam_custom_role" "vm" {
     "compute.subnetworks.get",
     "compute.globalForwardingRules.list",
     "compute.zones.list",
+    "compute.forwardingRules.list",
   ]
 }