Skip to content

Instantly share code, notes, and snippets.

@misskecupbung

misskecupbung/velero-create-sa

Last active October 6, 2022 18:44
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save misskecupbung/e6977478352f81037e8b22b7ff01d280 to your computer and use it in GitHub Desktop.
Save misskecupbung/e6977478352f81037e8b22b7ff01d280 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
velero-create-sa
gcloud iam service-accounts create velero-backup-anandadwi --display-name "Velero SA"
SERVICE_ACCOUNT_EMAIL=$(gcloud iam service-accounts list --filter="displayName:Velero SA" --format 'value(email)')
gcloud iam service-accounts list
ROLE_PERMISSIONS=(
compute.disks.get
compute.disks.create
compute.disks.createSnapshot
compute.snapshots.get
compute.snapshots.create
compute.snapshots.useReadOnly
compute.snapshots.delete
compute.zones.get
)
gcloud iam roles create velero.server --project $PROJECT_ID --title "Velero SA" --permissions "$(IFS=","; echo "${ROLE_PERMISSIONS[*]}")"
gcloud projects add-iam-policy-binding $PROJECT_ID --member serviceAccount:$SERVICE_ACCOUNT_EMAIL --role projects/$PROJECT_ID/roles/velero.server
gsutil iam ch serviceAccount:$SERVICE_ACCOUNT_EMAIL:objectAdmin gs://${BUCKET}
gcloud iam service-accounts keys create credentials-velero --iam-account $SERVICE_ACCOUNT_EMAIL
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment