Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Additional role to service account used by CAPG e2e tests #7665

Open
richardcase opened this issue Jan 9, 2025 · 4 comments
Open

Additional role to service account used by CAPG e2e tests #7665

richardcase opened this issue Jan 9, 2025 · 4 comments
Assignees
Labels
sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra.

Comments

@richardcase
Copy link
Contributor

The e2e tests in CAPG have been updated to cover GKE provisioning. As a result, the service account that is retrieved from boskos needs an additional role assigning to it.

The Boskos resource details:

Type: gce-project
Owner: cluster-api-provider-gcp

Note: the resource is a key for a GCP service account.

The GCP service account that is related to this resource needs the following role adding to it:

iam.serviceAccountTokenCreator

This is blocking the e2e tests running.

@richardcase richardcase added the sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra. label Jan 9, 2025
@richardcase
Copy link
Contributor Author

//cc @cpanato @salasberryfin

@cpanato
Copy link
Member

cpanato commented Jan 9, 2025

/assign

@cpanato
Copy link
Member

cpanato commented Jan 9, 2025

cc @ameukam can you help here? or who we can talk with

@ameukam
Copy link
Member

ameukam commented Jan 10, 2025

I have very limited bandwidth currently. Sorry. 😞
Talk to one of the @kubernetes/sig-k8s-infra-leads

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
sig/k8s-infra Categorizes an issue or PR as relevant to SIG K8s Infra.
Projects
None yet
Development

No branches or pull requests

3 participants