feat(infra): Add ws server infra changes (#7886)

add ws server infra changes
This commit is contained in:
Aarushi
2024-08-23 17:25:57 +01:00
committed by GitHub
parent 45ace8ccab
commit 26f56114d1

View File

@@ -20,6 +20,10 @@ service_accounts = {
"dev-agpt-builder-sa" = {
display_name = "AutoGPT Dev Builder Account"
description = "Service account for agpt dev builder"
},
"dev-agpt-ws-server-sa" = {
display_name = "AutoGPT Dev WebSocket Server Account"
description = "Service account for agpt dev websocket server"
}
}
@@ -33,17 +37,23 @@ workload_identity_bindings = {
service_account_name = "dev-agpt-builder-sa"
namespace = "dev-agpt"
ksa_name = "dev-agpt-builder-sa"
},
"dev-agpt-ws-server-workload-identity" = {
service_account_name = "dev-agpt-ws-server-sa"
namespace = "dev-agpt"
ksa_name = "dev-agpt-ws-server-sa"
}
}
role_bindings = {
"roles/container.developer" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com"
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-ws-server-sa@agpt-dev.iam.gserviceaccount.com"
],
"roles/cloudsql.client" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com"
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com",
],
"roles/cloudsql.editor" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
@@ -55,15 +65,18 @@ role_bindings = {
],
"roles/iam.workloadIdentityUser" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com"
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-ws-server-sa@agpt-dev.iam.gserviceaccount.com"
]
"roles/compute.networkUser" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com"
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-ws-server-sa@agpt-dev.iam.gserviceaccount.com"
],
"roles/container.hostServiceAgentUser" = [
"serviceAccount:dev-agpt-server-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com"
"serviceAccount:dev-agpt-builder-sa@agpt-dev.iam.gserviceaccount.com",
"serviceAccount:dev-agpt-ws-server-sa@agpt-dev.iam.gserviceaccount.com"
]
}