Fixing failing deployment on GHA to deploy to GKE (wrong skaffold flag removed). (#51)

Add role to deployment service account, otherwise it fails on permission denied when running setup/setup_ksa.sh script

Author: evekhm

.github/workflows/deployment_gke_dev.yaml

@@ -73,8 +73,7 @@ jobs:
           --profile gke \
           -l commit=$GITHUB_SHA \
           --namespace $SKAFFOLD_NAMESPACE \
-          --tag latest \
-          --add-skaffold-labels=false
+          --tag latest
 
       - name: Upload Skaffold cache
         if: always()

terraform/stages/2-foundation/main.tf

@@ -115,6 +115,7 @@ module "deployment_service_account" {
     "roles/firebase.admin",
     "roles/iam.serviceAccountTokenCreator",
     "roles/iam.serviceAccountUser",
+    "iam.serviceAccountAdmin",
     "roles/iam.workloadIdentityUser",
     "roles/logging.admin",
     "roles/logging.viewer",