CODE EXAMPLE FOR SHELL

gcloud add role to service account

gcloud projects add-iam-policy-binding ${GCP_PROJECT_ID} 
    --member=serviceAccount:${GCP_SVC_ACC_EMAIL}
    --role=roles/container.admin