From 4e5eeedd6992dc41992036547f8364163fca68f9 Mon Sep 17 00:00:00 2001 From: Aaron Crickenberger Date: Wed, 3 Mar 2021 18:12:56 -0500 Subject: [PATCH] roles: remove backup user:* bindings for organization.admin --- infra/gcp/ensure-organization.sh | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/infra/gcp/ensure-organization.sh b/infra/gcp/ensure-organization.sh index c3885016d27..3b066ef8512 100755 --- a/infra/gcp/ensure-organization.sh +++ b/infra/gcp/ensure-organization.sh @@ -90,11 +90,10 @@ color 6 "Ensuring organization IAM bindings exist" color 6 "Ensuring removed organization IAM bindings do not exist" ( + # TODO(spiffxp): remove this once the old bindings are confirmed gone for role in "${old_org_admin_roles[@]}"; do - # TODO(spiffxp): remove the extra super duper paranoia once we verify - # I haven't locked myself out via group membership - ensure_org_role_binding "user:thockin@google.com" "${role}" - ensure_org_role_binding "user:davanum@gmail.com" "${role}" + ensure_removed_org_role_binding "user:thockin@google.com" "${role}" + ensure_removed_org_role_binding "user:davanum@gmail.com" "${role}" done ) 2>&1 | indent