You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When I try to create a Vault GCP Secret Engine Roleset on a BigQuery Dataset, it throws "unsupported resource type: projects/datasets" error. I'm stuck on this weird error. What is the root cause?
I can see that in the below page, bigquery datasets can be added to a roleset's binding with the full resource name, but it did not work. https://www.vaultproject.io/docs/secrets/gcp#roleset-bindings
resource "vault_gcp_secret_roleset" "dataset_access_key_test" {
backend = vault_gcp_secret_backend.gcp.path
roleset = var.roleset_name
secret_type = "service_account_key"
project = var.project_id
binding {
# Here I've tried both the self_link attribute of the dataset and the full resource name like below. Neither of them worked.
resource = "//bigquery.googleapis.com/projects/${var.project_id}/datasets/${var.dataset_id}"
roles = ["roles/bigquery.dataViewer"]
}
}
Error: Error writing GCP Secrets backend roleset "gcp/roleset/<roleset_name>": Error making API request.
URL: PUT https:///v1/gcp/roleset/<roleset_name>
Code: 400. Errors:
2 errors occurred:
errors from both primary and secondary; primary error was invalid resource "//bigquery.googleapis.com/projects/<project_id>/datasets/<dataset_id>": unsupported resource type: projects/datasets; secondary errors follow
The text was updated successfully, but these errors were encountered:
halil-burak
changed the title
unsupported resource type: projects/datasets whi
unsupported resource type: projects/datasets while creating gcp secret roleset with bigquery binding
Aug 26, 2020
When I try to create a Vault GCP Secret Engine Roleset on a BigQuery Dataset, it throws "unsupported resource type: projects/datasets" error. I'm stuck on this weird error. What is the root cause?
I can see that in the below page, bigquery datasets can be added to a roleset's binding with the full resource name, but it did not work.
https://www.vaultproject.io/docs/secrets/gcp#roleset-bindings
Command output below:
vault_gcp_secret_roleset.<roleset_name>: Creating...
Error: Error writing GCP Secrets backend roleset "gcp/roleset/<roleset_name>": Error making API request.
URL: PUT https:///v1/gcp/roleset/<roleset_name>
Code: 400. Errors:
The text was updated successfully, but these errors were encountered: