import * as gcp from "@pulumi/gcp" ; import * as config from "./config" ; import * as util from "./util" ; const infraCiId = "infraCi" ; const infraCi = new gcp . serviceAccount . Account ( infraCiId , { project : config . project , accountId : "infra-ci" , displayName : "Infrastructure CI account" , } ) ; const infraCiClusterAdminRole = util . bindToRole ( `${ infraCiId }ClusterAdmin` , infraCi , { project : config . project , role : "roles/container.clusterAdmin" , } ) ; const infraCiCloudSqlAdminRole = util . bindToRole ( `${ infraCiId }CloudSqlAdmin` , infraCi , { project : config . project , role : "roles/cloudsql.admin" , } ) ; const infraCiKey = util . createCiKey ( `${ infraCiId }Key` , infraCi ) ; export const infraCiClientSecret = util . clientSecret ( infraCiKey ) ; const k8sAppDevCiId = "k8sAppDev" ; const k8sAppDevCi = new gcp . serviceAccount . Account ( k8sAppDevCiId , { project : config . project , accountId : "k8s-app-dev-ci" , displayName : "Infrastructure CI account" , } ) ; const k8sAppDevRole = util . bindToRole ( k8sAppDevCiId , k8sAppDevCi , { project : config . project , role : "roles/container.developer" , } ) ; const k8sAppDevCiKey = util . createCiKey ( `${ k8sAppDevCiId }Key` , k8sAppDevCi ) ; export const k8sAppDevCiClientSecret = util . clientSecret ( k8sAppDevCiKey ) ; export const project = config . project ;