From d4f472ff73de9537406da77bf923629c11ec6674 Mon Sep 17 00:00:00 2001
From: DimitriKirchner <dimitri.kirchner@gmail.com>
Date: Wed, 5 Mar 2025 15:18:24 -0500
Subject: [PATCH] fix(cloud-function): run with non default service account
 (#12723)

* Update test-build to use non default SA

* Update stage and prod builds to use non-default SA
---
 .github/workflows/prod-build.yml  | 1 +
 .github/workflows/stage-build.yml | 1 +
 .github/workflows/test-build.yml  | 1 +
 3 files changed, 3 insertions(+)

diff --git a/.github/workflows/prod-build.yml b/.github/workflows/prod-build.yml
index 677b1a148547..de08702c889e 100644
--- a/.github/workflows/prod-build.yml
+++ b/.github/workflows/prod-build.yml
@@ -392,6 +392,7 @@ jobs:
             --max-instances=1000 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-prod-prod-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=developer.mozilla.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.mdnplay.dev" \
             --set-env-vars="ORIGIN_PLAY=mdnplay.dev" \
diff --git a/.github/workflows/stage-build.yml b/.github/workflows/stage-build.yml
index 6ec334e75366..8448c82c673b 100644
--- a/.github/workflows/stage-build.yml
+++ b/.github/workflows/stage-build.yml
@@ -406,6 +406,7 @@ jobs:
             --max-instances=100 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-nonprod-stage-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=developer.allizom.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.mdnyalp.dev" \
             --set-env-vars="ORIGIN_PLAY=mdnyalp.dev" \
diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml
index 02e541442f9d..8d1375a8d2c8 100644
--- a/.github/workflows/test-build.yml
+++ b/.github/workflows/test-build.yml
@@ -335,6 +335,7 @@ jobs:
             --max-instances=100 \
             --memory=2GB \
             --timeout=120s \
+            --run-service-account=run-nonprod-test-functions@${{ secrets.GCP_PROJECT_NAME }}.iam.gserviceaccount.com \
             --set-env-vars="ORIGIN_MAIN=test.developer.allizom.org" \
             --set-env-vars="ORIGIN_LIVE_SAMPLES=live.test.mdnyalp.dev" \
             --set-env-vars="ORIGIN_PLAY=test.mdnyalp.dev" \