give publish access to the service account

2025-07-23 07:19:50 -04:00 · 2020-11-30 15:56:38 -05:00 · 2020-11-30 15:56:38 -05:00 · 4c5809c8a5
commit 4c5809c8a5
parent 875cf51a88
1 changed files with 6 additions and 0 deletions
--- a/src/gcloud/buckets.yaml
+++ b/src/gcloud/buckets.yaml
@ -38,6 +38,12 @@ resources:
      defaultObjectAcl:
        - entity: allUsers
          role: READER
+      accessControl:
+        gcpIamPolicy:
+          bindings:
+            - role: roles/dynamicbible_publish
+              members:
+                - "serviceAccount:$(ref.gitlab-service-account.email)"
  - name: gitlab-service-account
    type: iam.v1.serviceAccount
    properties: