Skip to content

Commit

Permalink
add note that IAM conditions are whitelist-only
Browse files Browse the repository at this point in the history
  • Loading branch information
danawillow committed Nov 7, 2019
1 parent 56234e4 commit 3e5cd61
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 7 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ data "google_iam_policy" "admin" {
}
```

With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html), Whitelist-only):

```hcl
resource "google_project_iam_policy" "project" {
Expand Down Expand Up @@ -87,7 +87,7 @@ resource "google_project_iam_binding" "project" {
}
```

With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html), Whitelist-only):

```hcl
resource "google_project_iam_binding" "project" {
Expand Down Expand Up @@ -116,7 +116,7 @@ resource "google_project_iam_member" "project" {
}
```

With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html), Whitelist-only):

```hcl
resource "google_project_iam_member" "project" {
Expand Down Expand Up @@ -179,7 +179,7 @@ will not be inferred from the provider.

* `audit_log_config` - (Required only by google\_project\_iam\_audit\_config) The configuration for logging of each type of permission. This can be specified multiple times. Structure is documented below.

* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. You must be whitelisted for the IAM Conditions private beta in order to use them in Terraform.
Structure is documented below.

---
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@ resource "google_service_account_iam_binding" "admin-account-iam" {
}
```

With IAM Conditions ([beta](https://terraform.io/docs/providers/google/guides/provider_versions.html)):
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html), Whitelist-only):

```hcl
resource "google_service_account" "sa" {
Expand Down Expand Up @@ -112,7 +112,7 @@ resource "google_service_account_iam_member" "gce-default-account-iam" {
}
```

With IAM Conditions ([beta](https://terraform.io/docs/providers/google/guides/provider_versions.html)):
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html), Whitelist-only):

```hcl
resource "google_service_account" "sa" {
Expand Down Expand Up @@ -155,7 +155,7 @@ The following arguments are supported:
* `policy_data` - (Required only by `google_service_account_iam_policy`) The policy data generated by
a `google_iam_policy` data source.

* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/guides/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. You must be whitelisted for the IAM Conditions private beta in order to use them in Terraform.
Structure is documented below.

The `condition` block supports:
Expand Down

0 comments on commit 3e5cd61

Please sign in to comment.