Analyzed script: ensure-gsuite.sh
- Provider:
Google
- Components for project:
k8s-gsuite
1:- Project:
k8s-gsuite
- API:
admin
groupssettings
- IAM Service Account:
gsuite-groups-manager
:- display_name:
Grants access to the googlegroups API in kubernetes.io GSuite
- display_name:
- IAM Policy Binding:
roles/owner
:user:wg-k8s-infra-api@kubernetes.io
- Project:
google_project:
- name: k8s-gsuite
google_project_service:
- service: admin.googleapis.com
project: k8s-gsuite
- service: groupssettings.googleapis.com
project: k8s-gsuite
google_service_account:
- account_id: gsuite-groups-manager
display_name: Grants access to the googlegroups API in kubernetes.io GSuite
project: k8s-gsuite
google_project_iam_binding:
- role: roles/owner
members:
- user:wg-k8s-infra-api@kubernetes.io
project: k8s-gsuite
- 1 At the end of script for provisioning GSuite resources there is mention about some manual tasks human needs to do to grant GSuite's service account access (it also needs to be acknowdleged by the human who runs the script by pressing enter)