important-leather-28796
03/28/2019, 9:17 PMbuild-sa
loses the storage admin rolecreamy-potato-29402
03/28/2019, 9:18 PMstocky-spoon-28903
03/28/2019, 9:18 PMimportant-leather-28796
03/28/2019, 9:19 PMapi-<stack name>
has also lost the roles/storage.admin
pulumi up
on the identity stack does not re-add the iam role to the service accountroles/storage.admin
onlycreamy-potato-29402
03/28/2019, 9:22 PMimportant-leather-28796
03/28/2019, 9:23 PMpulumi up
would add it backstocky-spoon-28903
03/28/2019, 9:24 PMimportant-leather-28796
03/28/2019, 9:25 PMstocky-spoon-28903
03/28/2019, 9:26 PMpulumi-gcp
is based on.important-leather-28796
03/28/2019, 9:27 PMdestroy
removes the role, my app or cluster, I’ll see if I can narrow thatstocky-spoon-28903
03/28/2019, 10:06 PMimportant-leather-28796
03/28/2019, 10:10 PMup
and not destroy
that is changing things.stocky-spoon-28903
03/28/2019, 10:11 PMimportant-leather-28796
03/28/2019, 10:12 PMgcloud iam service-accounts create ${BUILD_SA} \
--project=${GOOGLE_CLOUD_PROJECT} \
--display-name ${BUILD_SA}
gcloud projects add-iam-policy-binding ${GOOGLE_CLOUD_PROJECT} \
--role roles/storage.admin \
--member serviceAccount:${BUILD_SA_EMAIL}
build-sa
, the pulumi one is api-development
stocky-spoon-28903
03/29/2019, 10:02 PMimportant-leather-28796
03/29/2019, 10:03 PMstocky-spoon-28903
03/29/2019, 10:04 PMimportant-leather-28796
03/29/2019, 10:04 PMstocky-spoon-28903
03/29/2019, 10:05 PM