Skip to content

Reduce Service Account scopes

Sri Rang requested to merge cloud-seed-server-account-scopes into master

What does this MR do and why?

Replaces the cloudsql.admin role with cloudsql.client role for the Service Account that gets generated via the GitLab Project :: Infra :: Google Cloud UI.

Fixes: gitlab-org/incubation-engineering/five-minute-production/meta#103 (closed)

Screenshots or screen recordings

None, purely internal.

How to set up and validate locally

Nothing to validate except code review.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports