def validate()

in marketplace/deployer_util/config_helper.py [0:0]


  def validate(self):
    """Called by Schema.validate(); for backwards-incompatible checks."""
    if not self._description:
      raise InvalidSchema(
          'SERVICE_ACCOUNT must have a `description` '
          'explaining purpose and permission requirements. See docs: '
          'https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/master/docs/schema.md#type-service_account'
      )
    if self.has_discouraged_cluster_scoped_permissions():
      raise InvalidSchema(
          'Disallowed service account role(s): '
          'For `ClusterRole` roles, only the "view" predefined role is '
          'allowed. Instead, use a "CUSTOM" role with specific '
          '"apiGroups" and/or "resources".')