#2727 [BUG] GCP Opta Deployment does not set roles and permissions
Issue created by
tszumowski
Describe the bug
When I run the opta GCP deployment steps, everything gets deployed including the service accounts. However, it did not apply the Roles or Permissions described
here. I needed to manually follow those directions after running the Opta deployment in order for Flyte to work.
Expected behavior
Created GCP Service Accounts should have the permissions required to read/write from buckets as well as have the FlyteAdmin role should have the iam.serviceAccounts.signBlob applied.
All permissions defined in
the manual instructions should be in the deployment.
Additional context to reproduce
See
this thread for details. To reproduce, deploy the Opta GCP configuration and check the service account permissions for FlyteAdmin. It should have signBlob shown above.
I attached the logs from my run.
opta_gcp_deploy_logs.txt
Screenshots
No response
Are you sure this issue hasn't been raised already?
☑︎ Yes
Have you read the Code of Conduct?
☑︎ Yes
flyteorg/flyte