Permissions for Eventing's new service account
* Reorganized roles
Have basic permissions at top with predifined roles in alphabetical
* Added roles necessary for cloud-run-events-source
Needed by eventing for e2e testing of data plane
@@ -49,34 +49,43 @@ readonly RESOURCES=(
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/container.admin"
+ "roles/viewer"
+ "knative-dev@googlegroups.com"
+
+ "roles/cloudscheduler.admin"
"prow-job@knative-tests.iam.gserviceaccount.com"
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/storage.admin"
+ "roles/cloudtrace.agent"
+ "cloud-run-events-source@prow-build-crgke.iam.gserviceaccount.com"
+
+ "roles/container.admin"
"prow-job@knative-tests.iam.gserviceaccount.com"
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/pubsub.admin"
+ "roles/logging.configWriter"
"prow-job@knative-tests.iam.gserviceaccount.com"
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/logging.configWriter"
+ "roles/monitoring.editor"
+ "cloud-run-events-source@prow-build-crgke.iam.gserviceaccount.com"
+
+ "roles/pubsub.admin"
"prow-job@knative-tests.iam.gserviceaccount.com"
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/cloudscheduler.admin"
+ "roles/pubsub.editor"
+ "cloud-run-events-source@prow-build-crgke.iam.gserviceaccount.com"
+
+ "roles/storage.admin"
"prow-job@knative-tests.iam.gserviceaccount.com"
"prow-job@knative-nightly.iam.gserviceaccount.com"
"prow-job@knative-releases.iam.gserviceaccount.com"
- "roles/viewer"
- "knative-dev@googlegroups.com"
-
# APIs to enable
"cloudresourcemanager.googleapis.com"
"compute.googleapis.com"
