zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update docs about role automatically granted to dataform SA

This commit is contained in:
Wiktor Niesiobędzki 2024-03-02 13:24:51 +00:00 committed by Wiktor Niesiobędzki
parent 4aa08f63d3
commit ef19524b0b
2 changed files with 14 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
modules/project/README.md
View File

@ -213,19 +213,20 @@ module "project" {
This table lists all affected services and roles that you need to grant to service identities
| service | service identity | role |
|---|---|---|
| apigee.googleapis.com | apigee | roles/apigee.serviceAgent |
| artifactregistry.googleapis.com | artifactregistry | roles/artifactregistry.serviceAgent |
| cloudasset.googleapis.com | cloudasset | roles/cloudasset.serviceAgent |
| cloudbuild.googleapis.com | cloudbuild | roles/cloudbuild.builds.builder |
| dataplex.googleapis.com | dataplex | roles/dataplex.serviceAgent |
| dlp.googleapis.com | dlp | roles/dlp.serviceAgent |
| gkehub.googleapis.com | fleet | roles/gkehub.serviceAgent |
| meshconfig.googleapis.com | servicemesh | roles/anthosservicemesh.serviceAgent |
| service | service identity | role |
|------------------------------------|----------------------|----------------------------------------|
| apigee.googleapis.com | apigee | roles/apigee.serviceAgent |
| artifactregistry.googleapis.com | artifactregistry | roles/artifactregistry.serviceAgent |
| cloudasset.googleapis.com | cloudasset | roles/cloudasset.serviceAgent |
| cloudbuild.googleapis.com | cloudbuild | roles/cloudbuild.builds.builder |
| dataform.googleapis.com | dataform | roles/dataform.serviceAgent |
| dataplex.googleapis.com | dataplex | roles/dataplex.serviceAgent |
| dlp.googleapis.com | dlp | roles/dlp.serviceAgent |
| gkehub.googleapis.com | fleet | roles/gkehub.serviceAgent |
| meshconfig.googleapis.com | servicemesh | roles/anthosservicemesh.serviceAgent |
| multiclusteringress.googleapis.com | multicluster-ingress | roles/multiclusteringress.serviceAgent |
| pubsub.googleapis.com | pubsub | roles/pubsub.serviceAgent |
| sqladmin.googleapis.com | sqladmin | roles/cloudsql.serviceAgent |
| pubsub.googleapis.com | pubsub | roles/pubsub.serviceAgent |
| sqladmin.googleapis.com | sqladmin | roles/cloudsql.serviceAgent |
## Shared VPC

2
modules/project/service-agents.yaml
View File

@ -146,7 +146,7 @@
service_agent: "service-%s@dataflow-service-producer-prod.iam.gserviceaccount.com"
- name: "dataform"
service_agent: "service-%s@gcp-sa-dataform.iam.gserviceaccount.com"
jit: true
jit: true # roles/dataform.serviceAgent
- name: "datafusion"
service_agent: "service-%s@gcp-sa-datafusion.iam.gserviceaccount.com"
- name: "datalabeling"