in marketplace/deployer_util/config_helper.py [0:0]
def validate(self):
"""Called by Schema.validate(); for backwards-incompatible checks."""
if not self._description:
raise InvalidSchema(
'SERVICE_ACCOUNT must have a `description` '
'explaining purpose and permission requirements. See docs: '
'https://github.com/GoogleCloudPlatform/marketplace-k8s-app-tools/blob/master/docs/schema.md#type-service_account'
)
if self.has_discouraged_cluster_scoped_permissions():
raise InvalidSchema(
'Disallowed service account role(s): '
'For `ClusterRole` roles, only the "view" predefined role is '
'allowed. Instead, use a "CUSTOM" role with specific '
'"apiGroups" and/or "resources".')