fix: key decrypter role

23doors · 23doors · commit 381eaae2eeb4 · 2026-02-20T12:54:02.000+01:00
diff --git a/plugin/command_create_service_account.go b/plugin/command_create_service_account.go
@@ -97,6 +97,7 @@ func (p *Plugin) setupOutblocksServiceAccountPermissions(ctx context.Context, na
 			"roles/secretmanager.secretAccessor",
 			"roles/cloudfunctions.admin",
 			"roles/run.admin",
+			"roles/cloudkms.cryptoKeyDecrypter",
 		)
 
 		return err

Original file line number	Diff line number	Diff line change
`@@ -97,6 +97,7 @@ func (p *Plugin) setupOutblocksServiceAccountPermissions(ctx context.Context, na`
`97`	`97`	`"roles/secretmanager.secretAccessor",`
`98`	`98`	`"roles/cloudfunctions.admin",`
`99`	`99`	`"roles/run.admin",`
	`100`	`+ "roles/cloudkms.cryptoKeyDecrypter",`
`100`	`101`	`)`
`101`	`102`
`102`	`103`	`return err`