blob: b1cb5d729c627fd41e808327a4b55967e79a5a51 [file] [log] [blame]
#/bin/bash
# Creates the service account for SkCQ Internal Frontend.
set -e -x
source ../../kube/config.sh
# New service account we will create.
SA_NAME="skcq-fe-internal"
SA_EMAIL="${SA_NAME}@${PROJECT_SUBDOMAIN}.iam.gserviceaccount.com"
../../kube/secrets/add-service-account.sh \
google.com:skia-corp \
skia-corp \
${SA_NAME} \
"Service account for SkCQ internal frontend."
gcloud projects add-iam-policy-binding skia-firestore --member serviceAccount:${SA_EMAIL} --role roles/datastore.user