Update gcsfuse to use scoped down bucket permissions

[sirdarckcat]

Also, make start.sh a bit easier to resume in case something fails (eg, incomplete permissions)

[sroettger]

Cool, makes sense.

…

On Mon, Feb 24, 2020 at 5:46 PM sirdarckcat ***@***.***> wrote: ***@***.**** commented on this pull request. ------------------------------ In infrastructure/kctf/scripts/cluster/start.sh <#46 (comment)>: > -gcloud compute routers create kctf-${CLUSTER_NAME}-nat-router --network=default --region ${ZONE::-2} -gcloud compute routers nats create kctf-${CLUSTER_NAME}-nat-config --router-region europe-west4 --router kctf-${CLUSTER_NAME}-nat-router --nat-all-subnet-ip-ranges --auto-allocate-nat-external-ips +if [ -z "${EXISTING_CLUSTER}" ]; then creating and deleting a cluster is the first operation and is very slow, so if you face issues below (like missing permissions, forgot to enable an API, etc), its super slow to fix them by cycling through delete/create. — You are receiving this because your review was requested. Reply to this email directly, view it on GitHub <#46?email_source=notifications&email_token=AEM2JHXBAQW2BTJTO7XUDBDREP2U5A5CNFSM4K2KPYFKYY3PNVWWK3TUL52HS4DFWFIHK3DMKJSXC5LFON2FEZLWNFSXPKTDN5WW2ZLOORPWSZGOCWVSMBQ#discussion_r383382405>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEM2JHQ2QZVT5PVL4U3IEMLREP2U5ANCNFSM4K2KPYFA> .