mirrors/pinniped
1
0
Fork 0
mirror of https://github.com/vmware-tanzu/pinniped.git synced 2026-01-06 21:47:45 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Use only the gcp-instance-admin service account

Browse Source
This commit is contained in:
Joshua Casey
2025-10-17 07:45:08 -05:00
parent 9645542ff6
commit f333b15a1d
3 changed files with 15 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
pipelines/concourse-workers/pipeline.yml
View File

@@ -11,8 +11,8 @@ meta:
gke_admin_params: &gke_admin_params
INSTANCE_ZONE: us-west1-c
PINNIPED_GCP_PROJECT: ((gcp-project-name))
GCP_USERNAME: ((gke-cluster-developer-username))
GCP_JSON_KEY: ((gke-cluster-developer-json-key))
GCP_USERNAME: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
# GCP account info and which zone the workers should be created in and deleted from.
gcp_account_params: &gcp_account_params
@@ -26,8 +26,8 @@ meta:
CLUSTER_REGION: us-west1
CLUSTER_ZONE: us-west1-c
GCP_PROJECT: ((gcp-project-name))
GCP_SERVICE_ACCOUNT: ((gke-test-pool-manager-username))
GCP_JSON_KEY: ((gke-test-pool-manager-json-key))
GCP_SERVICE_ACCOUNT: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
# Azure account info and which resource group the clusters should be created in and deleted from.
azure_account_params: &azure_account_params

14
pipelines/main/pipeline.yml
View File

@@ -89,8 +89,8 @@ meta:
# CLUSTER_ZONE: us-west1-c
CLUSTER_REGION: us-west1
GCP_PROJECT: ((gcp-project-name))
GCP_SERVICE_ACCOUNT: ((gke-test-pool-manager-username))
GCP_JSON_KEY: ((gke-test-pool-manager-json-key))
GCP_SERVICE_ACCOUNT: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
# GCP account info and which zone the kind workers should be created in and deleted from.
gcp_account_params: &gcp_account_params
@@ -122,8 +122,8 @@ meta:
params:
GCS_BUCKET: pinniped-ci-logs
GCP_PROJECT: ((gcp-project-name))
GCP_USERNAME: ((gcp-cluster-diagnostic-uploader-username))
GCP_JSON_KEY: ((gcp-cluster-diagnostic-uploaded-json-key))
GCP_USERNAME: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
notify_on_failure: &notify_on_failure
on_failure:
@@ -558,7 +558,7 @@ resources:
driver: gcs
bucket: pinniped-ci-version-state
key: semver/0.0.x-version.txt
json_key: ((gcr-image-pusher-json-key))
json_key: ((gcp-instance-admin-json-key))
initial_version: 0.0.0
- name: github-release
@@ -2561,8 +2561,8 @@ jobs:
timeout: 45m
params:
PINNIPED_GCP_PROJECT: ((gcp-project-name))
GKE_USERNAME: ((gke-cluster-developer-username))
GKE_JSON_KEY: ((gke-cluster-developer-json-key))
GKE_USERNAME: ((gcp-instance-admin-username))
GKE_JSON_KEY: ((gcp-instance-admin-json-key))
CI_BUILD_IMAGE_NAME: ((ci-ghcr-registry))/ci-build
CI_BUILD_IMAGE_SERVER: https://ghcr.io
CI_BUILD_IMAGE_USERNAME: ((ci-ghcr-puller-username))

8
pipelines/pull-requests/pipeline.yml
View File

@@ -76,8 +76,8 @@ meta:
# CLUSTER_ZONE: us-west1-c
CLUSTER_REGION: us-west1
GCP_PROJECT: ((gcp-project-name))
GCP_SERVICE_ACCOUNT: ((gke-test-pool-manager-username))
GCP_JSON_KEY: ((gke-test-pool-manager-json-key))
GCP_SERVICE_ACCOUNT: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
# GCP account info and which zone the workers should be created in and deleted from.
gcp_account_params: &gcp_account_params
@@ -94,8 +94,8 @@ meta:
params:
GCS_BUCKET: pinniped-ci-logs
GCP_PROJECT: ((gcp-project-name))
GCP_USERNAME: ((gcp-cluster-diagnostic-uploader-username))
GCP_JSON_KEY: ((gcp-cluster-diagnostic-uploaded-json-key))
GCP_USERNAME: ((gcp-instance-admin-username))
GCP_JSON_KEY: ((gcp-instance-admin-json-key))
# Decides which specific patch versions of k8s we would like to deploy when creating kind cluster workers.
# It should be safe to update the patch version numbers here whenever new versions come out.