fix: Cloud Ops permission errors

GoogleCloudPlatform / cloud-ops-sandbox

Cloud Operations Sandbox is an open source collection of tools that helps practitioners to learn O11y and R9y practices from Google and apply them using Cloud Operations suite of tools.

Apache License 2.0

406 stars 148 forks source link

fix: Cloud Ops permission errors #931

Closed daniel-sanche closed 2 years ago

daniel-sanche commented 2 years ago

Over the last few weeks, we've been seeing missing data in the Cloud Ops products on new sandboxes. I thought this was due to our outdated version of Istio, but after some experimentation, it looks like it can be patched by adding additional permissions on the GKE cluster service account

This PR fixes the issue by adding extra roles to the default compute instance service account, ensuring GCP observability client libraries can send data to Cloud Ops

github-actions[bot] commented 2 years ago

You can also use the Stage Website Action if there were updates to the website.

Note: Open in Cloud Shell may not work properly if this PR contains changes to the custom Cloud Shell image