Closed Bug 1661116 Opened 5 years ago Closed 5 years ago

Please add Pub/Sub Lite Admin role to gcp-ingestion circleci service account

Categories

(Data Platform and Tools :: General, task, P2)

Product:
Data Platform and Tools
Component:
General
Type:
task
Points:
1

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: relud, Assigned: relud)

References

Details

because the existing Pub/Sub Admin role doesn't include Pub/Sub Lite, and we now have integration tests to run for Pub/Sub Lite.

Service account email is circleci@gcp-ingestion-integration-test.iam.gserviceaccount.com

Assignee: nobody → jklukas
Component: Operations → Pipeline Ingestion
QA Contact: moconnor
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Assignee: jklukas → dthorn

For posterity (lack of context is how we got here again), this project is not managed by dataops and it's apparently not possible to grant the blanket permissions that were needed here (the permissions added in https://bugzilla.mozilla.org/show_bug.cgi?id=1630121#c1 were insufficient).

I've filed bug #1661149 to have something to reference the next time this comes up.

See Also: → 1630121

(In reply to Wesley Dawson [:whd] from comment #1)

it's apparently not possible to grant the blanket permissions that were needed here (the permissions added in https://bugzilla.mozilla.org/show_bug.cgi?id=1630121#c1 were insufficient).

:klukas was able to grant the necessary permissions to mreid-all. Owner permissions could not be granted at the group level, but IAM Admin worked fine. We can effectively do anything now, because that granted the ability to modify our own permissions.

Component: Pipeline Ingestion → General
You need to log in before you can comment on or make changes to this bug.