Patch 6.0.1 - Update quickstart demo deployer

Updates quickstart demo deployer permissions to work with some projects with legacy cloud build accounts. Also fixes CATGAP Python library vulnerabilities.
GoogleCloudPlatform · Oct 21, 2024 · c6554b4 · c6554b4
1 parent 4545077
commit c6554b4
Show file tree

Hide file tree

Showing 7 changed files with 2,147 additions and 1,886 deletions.
diff --git a/requirements.txt b/requirements.txt
diff --git a/src/k9/src/catgap/catgap_pipeline/requirements.in b/src/k9/src/catgap/catgap_pipeline/requirements.in
@@ -6,3 +6,4 @@ google-api-python-client==2.80.*
 --index-url https://download.pytorch.org/whl/cpu --extra-index-url https://pypi.org/simple
 torch==1.13.*
 sentence-transformers==2.2.*
+numpy==1.24.*  # some customers still using 1.*
diff --git a/src/k9/src/catgap/catgap_pipeline/requirements.txt b/src/k9/src/catgap/catgap_pipeline/requirements.txt
diff --git a/src/k9/src/catgap/requirements.in b/src/k9/src/catgap/requirements.in
@@ -1,2 +1,3 @@
 apache-beam[gcp]~=2.53.0
 pyarrow>=14.0.1
+numpy==1.24.*  # some customers still using 1.*
diff --git a/src/k9/src/catgap/requirements.txt b/src/k9/src/catgap/requirements.txt
diff --git a/src/utils/interactive/apply_config.py b/src/utils/interactive/apply_config.py
@@ -32,7 +32,8 @@
 SOURCE_PROJECT_APIS = ["cloudresourcemanager", "storage-component",
                         "bigquery", "cloudbuild"]
 TARGET_PROJECT_APIS = ["storage-component", "bigquery"]
-PROJECT_ROLES = ["roles/bigquery.user"]
+PROJECT_ROLES = ["roles/bigquery.user", "roles/cloudbuild.builds.builder",
+ "roles/iam.serviceAccountUser"]
 
 
 

diff --git a/src/utils/interactive/requirements.txt b/src/utils/interactive/requirements.txt