roles: remove backup user:* bindings for organization.admin

spiffxp · Mar 3, 2021 · 4e5eeed · 4e5eeed
1 parent 3aab780
commit 4e5eeed
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/infra/gcp/ensure-organization.sh b/infra/gcp/ensure-organization.sh
@@ -90,11 +90,10 @@ color 6 "Ensuring organization IAM bindings exist"
 
 color 6 "Ensuring removed organization IAM bindings do not exist"
 (
+    # TODO(spiffxp): remove this once the old bindings are confirmed gone
     for role in "${old_org_admin_roles[@]}"; do
-        # TODO(spiffxp): remove the extra super duper paranoia once we verify
-        #                I haven't locked myself out via group membership
-        ensure_org_role_binding "user:[email protected]" "${role}"
-        ensure_org_role_binding "user:[email protected]" "${role}"
+        ensure_removed_org_role_binding "user:[email protected]" "${role}"
+        ensure_removed_org_role_binding "user:[email protected]" "${role}"
     done
 ) 2>&1 | indent