Configure cloudplatform (17), cloudrun (5), cloudscheduler (1), cloudtasks (1), composer (1), compute (5)

[muvaf]

External name configuration of 14 resources in the cloudplatform group:

• google_organization_iam_custom_role
• google_organization_iam_member
• google_organization_iam_policy
• google_organization_policy
• google_project_default_service_accounts
• google_project_iam_audit_config
• google_project_iam_binding
• google_project_iam_custom_role
• google_project_iam_policy
• google_project_organization_policy
• google_project_service
• google_project_usage_export_bucket
• google_service_account_iam_binding
• google_service_networking_peered_dns_domain

External name configuration of 5 resources in the cloudrun group:

• google_cloud_run_domain_mapping
• google_cloud_run_service
• google_cloud_run_service_iam_binding
• google_cloud_run_service_iam_member
• google_cloud_run_service_iam_policy

External name configuration of 1 resources in the cloudscheduler group:

• google_cloud_scheduler_job

External name configuration of 1 resources in the cloudtasks group:

• google_cloud_tasks_queue

External name configuration of 1 resources in the composer group:

• google_composer_environment

External name configuration of 5 resources in the compute group:

• google_compute_attached_disk
• google_compute_autoscaler
• google_compute_backend_bucket
• google_compute_backend_bucket_signed_url_key
• google_compute_backend_service

[donovanmuller]

To test the organization level IAM resources:

• google_organization_iam_custom_role
• google_organization_iam_member
• google_organization_iam_policy

I require the roles/iam.organizationRoleAdmin IAM Role to be able to list, get and create IAM roles, members and policies. If this Role could be added (even temporarily) to:

• Myself, for console access
• An existing or new service account I could use for provider credentials

[AaronME]

@donovanmuller I created https://github.com/upbound/official-providers/issues/494, extracting 3 high-priority resources from this ticket.

[AaronME]

Testing on this is blocked by https://github.com/upbound/platform-core/issues/358 - we need a new Organization for testing org-level resources without jeopardizing production.

[donovanmuller]

This issue can be closed one the following PR's are merged:

• https://github.com/upbound/official-providers/pull/504
• https://github.com/upbound/official-providers/pull/518
• https://github.com/upbound/official-providers/pull/519
• https://github.com/upbound/official-providers/pull/532

and this issue resolved:

• gcp: Configure google_organization_iam_policy  #11

[jeanduplessis]

I'm going to close this issue as we have another open issue for the remaining item.