Add IAM support for Google Cloud Source Repositories

[erikwebb]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment. If the issue is assigned to the "modular-magician" user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If the issue is assigned to a user, that user is claiming responsibility for the issue. If the issue is assigned to "hashibot", a community member has claimed the issue already.

Description

Add IAM policy support to the Google Cloud Source Repositories resources in Terraform, similar to compute_subnetwork_iam_* or google_pubsub_subscription_iam_*.

New or Affected Resource(s)

• google_sourcerepo_repository_iam_binding
• google_sourcerepo_repository_iam_member
• google_sourcerepo_repository_iam_policy

Potential Terraform Configuration

google_sourcerepo_repository_iam_binding

resource "google_sourcerepo_repository_iam_binding" "repo" {
  repository = "my-repository-id"
  role       = "roles/source.writer"

  members = [
    "user:[email protected]",
  ]
}

google_sourcerepo_repository_iam_member

resource "google_sourcerepo_repository_iam_member" "repo" {
  repository = "my-repository-id"
  role       = "roles/source.writer"
  member     = "user:[email protected]"
}

google_sourcerepo_repository_iam_policy

data "google_iam_policy" "writer" {
  binding {
    role = "roles/source.writer"

    members = [
      "user:[email protected]",
    ]
  }
}

resource "google_sourcerepo_repository_iam_policy" "repo" {
    repository = "my-repository-id"
    policy_data = "${data.google_iam_policy.writer.policy_data}"
}

References

• Add IAM support for storage bucket #822

[slevenick]

This will be available in the next release of the terraform provider.

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!