Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Duplicated service accounts #12141

Open
2 tasks
dekiel opened this issue Oct 14, 2024 · 0 comments
Open
2 tasks

Duplicated service accounts #12141

dekiel opened this issue Oct 14, 2024 · 0 comments
Labels
area/ci Issues or PRs related to CI related topics image-builder submission-pipeline

Comments

@dekiel
Copy link
Contributor

dekiel commented Oct 14, 2024

Description

Kyma submission and oci image builder pipelines has two service accounts each. The service accounts exist in sap-kyma-prow and kyma-project GCP projects. Both pipelines must have one and only one identity in our GCP projects. Service accounts used by pipelines must exist in sap-kyma-prow project

Reasons

Having two identities for each pipeline increases complexity, risk of misconfiguration and incorrect permissions.

Acceptance Criteria

  • Kyma submission pipeline has only one identity in GCP projects.
  • OCI image builder pipeline has only one identity in GCP projects.
@dekiel dekiel added area/ci Issues or PRs related to CI related topics image-builder submission-pipeline labels Oct 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/ci Issues or PRs related to CI related topics image-builder submission-pipeline
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@dekiel