AI-Cognitive-Leap/agnes-the-ai-analyst
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(bootstrap): grant monitoring.editor + enable monitoring API

Browse source 
v1.3.0 added google_monitoring_uptime_check_config + alert policies to the
module, but bootstrap-gcp.sh was not updated. Fresh customers (and the
first apply after upgrading existing customers) hit 403 on
monitoring.uptimeCheckConfigs.create.

Fix: enable monitoring.googleapis.com + grant roles/monitoring.editor to
the deploy SA. Idempotent (safe to re-run on existing projects).
This commit is contained in:
ZdenekSrotyr 2026-04-21 20:32:50 +02:00
parent 1a55167234
commit 4ab0838ba2
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
scripts/bootstrap-gcp.sh
View file

@ -26,6 +26,7 @@ gcloud services enable \
secretmanager.googleapis.com \ secretmanager.googleapis.com \
cloudresourcemanager.googleapis.com \ cloudresourcemanager.googleapis.com \
storage.googleapis.com \ storage.googleapis.com \
monitoring.googleapis.com \
--project="${PROJECT_ID}" --project="${PROJECT_ID}"
echo "=== Create deploy service account (if not exists) ===" echo "=== Create deploy service account (if not exists) ==="
@ -46,7 +47,8 @@ for role in \
iam.serviceAccountAdmin \ iam.serviceAccountAdmin \
secretmanager.admin \ secretmanager.admin \
storage.admin \ storage.admin \
resourcemanager.projectIamAdmin; do resourcemanager.projectIamAdmin \
monitoring.editor; do
gcloud projects add-iam-policy-binding "${PROJECT_ID}" \ gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
--member="serviceAccount:${SA_EMAIL}" \ --member="serviceAccount:${SA_EMAIL}" \
--role="roles/${role}" \ --role="roles/${role}" \