Reduce Service Account scopes
What does this MR do and why?
Replaces the cloudsql.admin
role with cloudsql.client
role for the Service Account that gets generated via the GitLab Project :: Infra :: Google Cloud UI.
Fixes: gitlab-org/incubation-engineering/five-minute-production/meta#103 (closed)
Screenshots or screen recordings
None, purely internal.
How to set up and validate locally
Nothing to validate except code review.
MR acceptance checklist
This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.
-
I have evaluated the MR acceptance checklist for this MR.