Closed theferrit32 closed 1 year ago
Need to update the revision that vrs-2 is using
Getting the cloudbuilds to push to the clingen-dev
container registry required adding the cloudbuild service account from the stage project as a storage object admin
on the dev container registry bucket in google cloud storage.
We have some IAM permissions configured in terraform. I think it would be beneficial to add these sorts of permissions to terraform too. Especially because the default service account names are pretty opaque, a long series of numbers, and it can be hard to tell what is going on just reading the permissions list in a project or on a bucket. We could create other service accounts with more descriptive names and then run the cloudbuilds and kubernetes applications with them.
Closes #589, #586