feat: adjust yakima roles in bootstrap (#21)

ssc-spc-ccoe-cei · Mar 24, 2023 · aeea254 · aeea254
1 parent 58253a0
commit aeea254
Showing 1 changed file with 1 addition and 6 deletions.
diff --git a/scripts/bootstrap/setup-kcc.sh b/scripts/bootstrap/setup-kcc.sh
@@ -117,12 +117,7 @@ gcloud organizations add-iam-policy-binding "${ORG_ID}" \
 
 gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
   --member "serviceAccount:${SA_EMAIL}" \
-  --role "roles/editor" \
-  --project "${PROJECT_ID}"
-
-gcloud projects add-iam-policy-binding "${PROJECT_ID}" \
-  --member "serviceAccount:${SA_EMAIL}" \
-  --role "roles/iam.serviceAccountAdmin" \
+  --role "roles/serviceusage.serviceUsageConsumer" \
   --project "${PROJECT_ID}"
 
 EMAIL=$(gcloud config list --format json|jq .core.account | sed 's/"//g')