fix(cloud-function): run with non default service account (#12723)

* Update test-build to use non default SA * Update stage and prod builds to use non-default SA
mdn · Mar 5, 2025 · d4f472f · d4f472f
1 parent 23ad5e8
commit d4f472f
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/.github/workflows/prod-build.yml b/.github/workflows/prod-build.yml
@@ -392,6 +392,7 @@ jobs:
             --max-instances=1000 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-prod-prod-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=developer.mozilla.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.mdnplay.dev" \
             --set-env-vars="ORIGIN_PLAY=mdnplay.dev" \

diff --git a/.github/workflows/stage-build.yml b/.github/workflows/stage-build.yml
@@ -406,6 +406,7 @@ jobs:
             --max-instances=100 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-nonprod-stage-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=developer.allizom.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.mdnyalp.dev" \
             --set-env-vars="ORIGIN_PLAY=mdnyalp.dev" \

diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
@@ -335,6 +335,7 @@ jobs:
             --max-instances=100 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-nonprod-test-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=test.developer.allizom.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.test.mdnyalp.dev" \
             --set-env-vars="ORIGIN_PLAY=test.mdnyalp.dev" \