bug(bq): only delete user managed keys

navikt · Aug 9, 2024 · 8b72dba · 8b72dba
1 parent e1ff903
commit 8b72dba
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/pkg/service/core/api/gcp/gcp_service_account.go b/pkg/service/core/api/gcp/gcp_service_account.go
@@ -160,9 +160,11 @@ func (a *serviceAccountAPI) recreateServiceAccountKey(ctx context.Context, accou
 	}
 
 	for _, key := range keys.Keys {
-		_, err := iamService.Projects.ServiceAccounts.Keys.Delete(key.Name).Do()
-		if err != nil {
-			return nil, errs.E(errs.IO, op, err)
+		if key.KeyType == "USER_MANAGED" {
+			_, err := iamService.Projects.ServiceAccounts.Keys.Delete(key.Name).Do()
+			if err != nil {
+				return nil, errs.E(errs.IO, op, err)
+			}
 		}
 	}