Update permissions for AR.

GoogleCloudPlatform · Aug 9, 2024 · 0883d5f · 0883d5f
1 parent 7e1ea0b
commit 0883d5f
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml b/test/infra/managed/namespaces/secretmanager-csi-build/iam-policy.yaml
@@ -35,6 +35,9 @@ spec:
     - members:
         - serviceAccount:[email protected]
       role: roles/viewer
+    - members:
+        - serviceAccount:service-735463103342@gcp-sa-artifactregistry.iam.gserviceaccount.com
+      role: roles/storage.objectViewer
     # cnrm controller permissions (manage all test/infra/managed resources)
     - members:
         - serviceAccount:[email protected]
@@ -93,3 +96,6 @@ spec:
         - user:[email protected]
         - user:[email protected]
       role: roles/owner
+    - members:
+        - user:[email protected]
+      role: roles/storage.objectViewer