diff --git a/IaC/modules/mlflow/log_pusher/main.tf b/IaC/modules/mlflow/log_pusher/main.tf index 7ce5b51..0328a67 100644 --- a/IaC/modules/mlflow/log_pusher/main.tf +++ b/IaC/modules/mlflow/log_pusher/main.tf @@ -28,6 +28,6 @@ resource "google_project_iam_member" "log_pusher_iap" { resource "google_project_iam_member" "log_pusher_storage" { project = var.project_id - role = "roles/storage.objectCreator" + role = "roles/storage.objectAdmin" member = "serviceAccount:${google_service_account.log_pusher.email}" } \ No newline at end of file diff --git a/README.md b/README.md index 38e638a..106722e 100644 --- a/README.md +++ b/README.md @@ -5,9 +5,9 @@ A tool to deploy a mostly serverless MLflow on a GCP project with one command ### Pre-requesites - A GCP project on which you are owner -- Initialized gcloud SDK +- Initialized gcloud SDK with your owner account - Docker engine running -- No app engine application running +- No app engine application running and no consent screen already setup ### Deploying Fill out the `vars` file. @@ -26,7 +26,7 @@ Fill out the `vars` file. - Enables the necessary services - Builds and pushes the MLFlow docker image - Creates a private IP CloudSQL (MySQL) database for the tracking server -- Creates an AppEngine Flex service for the web UI, secured by IAP +- Creates an AppEngine Flex on the default service for the web UI, secured by IAP - Manages all the network magic - Creates the `mlflow-log-pusher` service account