From db67377bfb4e6390739b1787858e37b7ae7930da Mon Sep 17 00:00:00 2001
From: Dan Noble <dnoble@gmail.com>
Date: Fri, 22 Nov 2024 15:13:29 -0500
Subject: [PATCH] Updated mixer service account bigquery permissions (#1467)

Reduced from roles/bigquery.admin to roles/bigquery.dataViewer
---
 gke/setup_robot_account.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gke/setup_robot_account.sh b/gke/setup_robot_account.sh
index 9235cea74..984fb2bb0 100755
--- a/gke/setup_robot_account.sh
+++ b/gke/setup_robot_account.sh
@@ -44,7 +44,7 @@ done
 # Data store project roles
 if [[ $STORE_PROJECT_ID != '' ]]; then
   declare -a roles=(
-      "roles/bigquery.admin"   # Query BigQuery
+      "roles/bigquery.dataViewer"   # Query BigQuery
       "roles/bigtable.reader" # Query Bigtable
       "roles/storage.objectViewer" # Branch Cache Read
       "roles/pubsub.editor" # Branch Cache subscription