You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Deploy gcr subscriptions for each project in organizational mode (#64)
Breaking Change: This adds a new variable called project_scan_ids which specifies the IDs of the projects where a subscription must be created for the expected gcr topic in each project, and removes the create_gcr_topic variable which may be confusing to the users, since some of the scanned projects may or may not contain this topic, and verifying if it exists is not an option.
Fixes issue where we were binding the custom role (which includes the storage.buckets.getIamPolicy permission) to the service account as a resource instead of as an identity. This meant that the service account did not get this permission applied, and was getting 403 errors on certain policies.