From d901b12f9191c8b533e9c5b7cc0836f4304ec9ed Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 25 Feb 2023 22:11:35 +0000
Subject: [PATCH] ops/vault: permit lukegbcom-deployer to write to
 lukegb-flipperzero bucket

---
 ops/vault/cfg/lukegbcom-deployer.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ops/vault/cfg/lukegbcom-deployer.nix b/ops/vault/cfg/lukegbcom-deployer.nix
index 8d94124fef..c737653218 100644
--- a/ops/vault/cfg/lukegbcom-deployer.nix
+++ b/ops/vault/cfg/lukegbcom-deployer.nix
@@ -13,6 +13,9 @@
     binding = [{
       resource = "//cloudresourcemanager.googleapis.com/projects/lukegbcom";
       roles = ["roles/firebasehosting.admin"];
+    } {
+      resource = "buckets/lukegb-flipperzero";
+      roles = ["roles/storage.objectAdmin"];
     }];
   };