Skip to content

Commit

Permalink
cloud: Stop giving BigQuery access to submitters
Browse files Browse the repository at this point in the history
Now that our BigQuery dataset is so large (and not partitioned), and
costs a lot to query, stop giving submitters permissions for accessing
it. We'll have to think of something else. E.g. giving access to
PostgreSQL.
  • Loading branch information
spbnick committed Sep 22, 2023
1 parent 04710f3 commit 0b50681
Showing 1 changed file with 0 additions and 10 deletions.
10 changes: 0 additions & 10 deletions cloud
Original file line number Diff line number Diff line change
Expand Up @@ -1659,16 +1659,6 @@ function submitter_deploy() {

member="serviceAccount:$submitter@$project.iam.gserviceaccount.com"

role="roles/bigquery.dataViewer"
mute gcloud projects add-iam-policy-binding "$project" \
--quiet \
--member "$member" \
--role "$role"
role="roles/bigquery.jobUser"
mute gcloud projects add-iam-policy-binding "$project" \
--quiet \
--member "$member" \
--role "$role"
role="roles/pubsub.publisher"
mute gcloud pubsub topics add-iam-policy-binding --project="$project" \
"$new_topic" \
Expand Down

0 comments on commit 0b50681

Please sign in to comment.