simonw/datasette

feature request: document minimum permissions for service account for cloudrun

Open

#1,415 opened on Aug 3, 2021

View on GitHub
 (4 comments) (1 reaction) (0 assignees)Python (625 forks)batch import
datasette-publishdocumentationhelp wanted

Repository metrics

Stars
 (8,637 stars)
PR merge metrics
 (Avg merge 67d 23h) (19 merged PRs in 30d)

Description

Thanks again for such a powerful project.

For deploying to cloudrun from github actions, I'd like to create a service account with minimal permissions.

It would be great to document what those minimum permission that need to be set in the IAM.

Contributor guide

Research direction
Investigate and test the minimal IAM permissions required for a service account to deploy to Cloud Run from GitHub Actions. Document the exact roles and permissions needed, including any necessary scopes.
Tech stack
python
Domain
clouddevopssecurity
Issue type
Documentation
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
Google CloudIAM
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
75