kelseyhightower / vault-on-google-kubernetes-engine

How to guide on running HashiCorp's Vault on Google Kubernetes Engine
387 stars 57 forks source link

[Self-solved issue] Pulling images from gcr.io #14

Closed dalekurt closed 5 years ago

dalekurt commented 5 years ago

@sethvargo I'm using my private gcr.io to host vault-enterprise and my GKE cluster will need to pull images from GCR so, I updated the service_account_iam_roles in the variables.tf file to include the roles/storage.objectViewer which allows the GKE cluster to pull images stored on gcr.io.

variable "service_account_iam_roles" {
  type = "list"

  default = [
    "roles/logging.logWriter",
    "roles/monitoring.metricWriter",
    "roles/monitoring.viewer",
    "roles/storage.objectViewer",
  ]
}

That solved my issue of pulling images stored in gcr.io. This is just for the benefit of others.

sethvargo commented 5 years ago

Hi there. I don’t think this is the correct repo for this issue as there’s no terraform in this repo.