updates IAM policies for specific Pub/Sub topics to enable users to subscribe

Author: hernandezc1

broker/cloud_run/lsst/classify_snn/deploy.sh

@@ -66,7 +66,7 @@ else
     # set IAM policies on public Pub/Sub resources
     if [ "$testid" = "False" ]; then
         user="allUsers"
-        roleid="projects/${GOOGLE_CLOUD_PROJECT}/roles/userPublic"
+        roleid="roles/pubsub.subscriber"
         gcloud pubsub topics add-iam-policy-binding "${ps_output_topic}" --member="${user}" --role="${roleid}"
     fi
 

broker/cloud_run/lsst/variability/deploy.sh

@@ -66,7 +66,7 @@ else
     # set IAM policies on public Pub/Sub resources
     if [ "$testid" = "False" ]; then
         user="allUsers"
-        roleid="projects/${GOOGLE_CLOUD_PROJECT}/roles/userPublic"
+        roleid="roles/pubsub.subscriber"
         gcloud pubsub topics add-iam-policy-binding "${ps_output_topic}" --member="${user}" --role="${roleid}"
     fi
 

broker/setup_broker/lsst/setup_broker.sh

@@ -148,7 +148,7 @@ manage_resources() {
         # set IAM policies on public Pub/Sub resources
         if [ "$testid" = "False" ]; then
             user="allUsers"
-            roleid="projects/${GOOGLE_CLOUD_PROJECT}/roles/userPublic"
+            roleid="roles/pubsub.subscriber"
             gcloud pubsub topics add-iam-policy-binding "${ps_topic_alerts}" --member="${user}" --role="${roleid}"
             gcloud pubsub topics add-iam-policy-binding "${ps_topic_alerts_json}" --member="${user}" --role="${roleid}"
             gcloud pubsub topics add-iam-policy-binding "${ps_topic_alerts_lite}" --member="${user}" --role="${roleid}"