-
Notifications
You must be signed in to change notification settings - Fork 1.7k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add capability to add a project in service perimeter in dry-run mode #7270
Comments
Hi The field you are looking for is called If this solves your question, please go ahead and close this issue. Thank you |
I am looking for that capability in
|
Think of
The docs in https://www.terraform.io/docs/providers/google/r/access_context_manager_service_perimeter_resource.html need to be clarified. |
I agree resource "google_access_context_manager_service_perimeter" "service_perimeter" {
parent = "accessPolicies/${var.policy}"
name = "accessPolicies/${var.policy}/servicePerimeters/${local.perimeter_name}"
title = local.perimeter_name
spec {
access_levels = []
resources = []
restricted_services = [
"storage.googleapis.com",
"bigtable.googleapis.com",
"bigquery.googleapis.com",
"pubsub.googleapis.com",
]
}
use_explicit_dry_run_spec = true
}
resource "google_access_context_manager_service_perimeter_resource" "service_perimeter_resource" {
perimeter_name = google_access_context_manager_service_perimeter.service_perimeter.name
resource = "projects/local.project_id"
}
|
To Riley to investigate, size and milestone. |
Hmm- the If we can't transparently upgrade, we'll want to add a flag as proposed. |
Spec wasn't added to the service_perimeter resource until after the service_perimeter_resource resource was added, so it wasn't on my radar (GoogleCloudPlatform/magic-modules#3353 vs GoogleCloudPlatform/magic-modules#3052) |
Whoops, I was very convinced in my head that those happened in the opposite order and didn't check. Thanks! Leaving this open for the next triage meeting, but I vote |
Is this solved already? I am in exactly same situation. |
Hello, |
PR 17614 added requested feature. Seems like it will be part of release 5.22 |
I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues. |
Community Note
Description
Add a configuration option in
google_access_context_manager_service_perimeter_resource
which will add projects to dry run mode of service perimeter.New or Affected Resource(s)
Potential Terraform Configuration
References
The text was updated successfully, but these errors were encountered: