Merge: bootstrap monitoring role fix
This commit is contained in:
commit
717f40c218
1 changed files with 3 additions and 1 deletions
|
|
@ -26,6 +26,7 @@ gcloud services enable \
|
||||||
secretmanager.googleapis.com \
|
secretmanager.googleapis.com \
|
||||||
cloudresourcemanager.googleapis.com \
|
cloudresourcemanager.googleapis.com \
|
||||||
storage.googleapis.com \
|
storage.googleapis.com \
|
||||||
|
monitoring.googleapis.com \
|
||||||
--project="${PROJECT_ID}"
|
--project="${PROJECT_ID}"
|
||||||
|
|
||||||
echo "=== Create deploy service account (if not exists) ==="
|
echo "=== Create deploy service account (if not exists) ==="
|
||||||
|
|
@ -46,7 +47,8 @@ for role in \
|
||||||
iam.serviceAccountAdmin \
|
iam.serviceAccountAdmin \
|
||||||
secretmanager.admin \
|
secretmanager.admin \
|
||||||
storage.admin \
|
storage.admin \
|
||||||
resourcemanager.projectIamAdmin; do
|
resourcemanager.projectIamAdmin \
|
||||||
|
monitoring.editor; do
|
||||||
gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
|
gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
|
||||||
--member="serviceAccount:${SA_EMAIL}" \
|
--member="serviceAccount:${SA_EMAIL}" \
|
||||||
--role="roles/${role}" \
|
--role="roles/${role}" \
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue