Skip to content

GCP service account CI vars protected if environment is protected

Sri Rang requested to merge incubation-5mp-google-cloud-service-account-protected-status into master

What does this MR do and why?

This MR links the protected status of the CI vars generated for GCP service accounts (GCP_PROJECT_ID, GCP_SERVICE_ACCOUNT and GCP_SERVICE_ACCOUNT_KEY) are protected if they are generated for a protected environment.

How to set up and validate locally

  1. Configure your GitLab instance for Google OAuth2
  2. Enable the incubation_5mp_google_cloud feature flag
  3. Navigate to Infrastructure :: Google Cloud menu item in a Project
  4. Generate a service account

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Sri Rang

Merge request reports