adding roles required by SA for deployment |<Jenish>

Signed-off-by: jenish-jain <jenishjain@rocketmail.com>
jenish-jain · Oct 8, 2023 · d59e086 · d59e086
1 parent 2c3417f
commit d59e086
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/register_wif.bash b/register_wif.bash
@@ -10,6 +10,14 @@ export PROJECT_ID="realm-asgard"
 export REPO="jenish-jain/bean_counter"
 
 export SERVICE_ACCOUNT_ID="cloud-function-deployer"
+# Roles required by SA #
+# Cloud Functions Developer
+# Cloud Functions Service Agent
+# Secret Manager Secret Accessor
+# Service Account Token Creator
+# Service Account User
+# Storage Admin
+# Workload Identity User
 
 gcloud iam service-accounts create "${SERVICE_ACCOUNT_ID}" \
   --project "${PROJECT_ID}"