brash-lamp-90149
04/17/2023, 11:15 PMpulumi up -s staging
runs successfully so I dont think I have any errors. Can someone help me understand how to accomplish this?
const registry = new gcp.container.Registry('gcr', {
project: gcp.config.project,
location: 'US',
})
const gcrServiceAccount = new gcp.serviceaccount.Account(
'gcr-service-account',
{
accountId: 'gcr-service-account',
displayName: 'GCR Service Account',
description:
'Service account for CI services that interact with GCR',
}
)
export const storageIAM = new gcp.storage.BucketIAMMember(
'gcr-storage-bucket-iam',
{
bucket: registry.bucketSelfLink,
role: 'roles/storage.admin',
member: gcrServiceAccount.email.apply(
(email) => `serviceAccount:${email}`
),
}
)
rhythmic-secretary-1287
04/19/2023, 7:52 AMnew gcp.storage.BucketIAMMember
this is changing the IAM in the Bucket, if you want to see it in the IAM you have to do new gcp.project.IAMMember
(or similar). This is a GCP concept on member per bucket or per project. It did bite me in the past