Give k8s-infra-prow-oncall@ roles/browser for org

kubernetes · Feb 18, 2021 · b8804cc · b8804cc
1 parent 4657d98
commit b8804cc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/infra/gcp/ensure-organization.sh b/infra/gcp/ensure-organization.sh
@@ -45,6 +45,9 @@ color 6 "Ensuring custom org role prow.viewer role exists"
 
 color 6 "Ensuring org-level IAM bindings exist"
 (
+    # [email protected] should be able to browse org resources
+    ensure_org_role_binding "group:[email protected]" "roles/browser"
+
     # TODO: this already exists, but seems overprivileged for a group that is about
     #       access to the "aaa" cluster in "kubernetes-public"
     ensure_org_role_binding "group:[email protected]" "roles/browser"