Skip to content

Grant permissions to generated Gcp service account

Sri Rang requested to merge incubation-5mp-service-account-policy into master

What does this MR do and why?

In previous MRs, the capability of generating GCP Service Accounts within the GitLab UI was merged.

This MR extends that by granting specific permissions to the GitLab generated GCP service account.

This is part of multiple MRs that are being extracted from this --large-- feature branch: !77524 (closed)

Screenshots or screen recordings

None, purely back-end change.

See https://www.youtube.com/watch?v=xRll4xzGkOc for a proof-of-concepts.

How to set up and validate locally

  1. Configure your GitLab instance for Google OAuth2
  2. Enable the incubation_5mp_google_cloud feature flag
  3. Navigate to Infrastructure :: Google Cloud menu item in a Project
  4. Generate a service account
  5. Verify in your Google Cloud console that the right permissions have been granted

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by Peter Leitzen

Merge request reports