Hacker News Reader

> only allowing read only commands

Out of curiosity, how do you do that? I have no experience with this tool, not I would ever thought to use it for infra, but you made me curious.

My assumption is by creating a service account with limited privileges and activating it for gcloud when running this.

Yes, in the meantime I figured out it's basically assigning it the Reader IAM role in GCP.