Function addRole

scripts/gcp-setup.js:82–88

(iamAccount, role)

}

async function addRole(iamAccount, role) {
  await $`gcloud projects add-iam-policy-binding ${project} ${[
    `--member=serviceAccount:${iamAccount}`,
    `--role=${role}`,
    `--format=none`,
  ]}`;
}

await addRole(pubSubAccount, "roles/iam.serviceAccountTokenCreator");
await addRole(storageAccount, "roles/pubsub.publisher");