kovagoadi/hunfabric
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use context prefixes for auto service grants

Browse Source
This commit is contained in:
Wiktor Niesiobędzki
2025-10-12 09:53:47 +00:00
parent 23dd44ce62
commit ad9d52a7da
2 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
tests/fixtures/shared-vpc.tf vendored
View File

@@ -56,7 +56,7 @@ module "project-service" {
shared_vpc_service_config = { shared_vpc_service_config = {
host_project = module.project-host.project_id host_project = module.project-host.project_id
# reuse the list of services from the module's outputs # reuse the list of services from the module's outputs
service_iam_grants = module.project-service.services service_iam_grants = [for service in module.project-service.services : "$service_agents:${service}"]
} }
} }

11
tests/modules/cloud_run_v2/examples/service-vpc-access-connector-create-sharedvpc.yaml
View File

@@ -39,11 +39,20 @@ values:
subnet: subnet:
- name: fixture-subnet-28 - name: fixture-subnet-28
project_id: test-host project_id: test-host
# those IAM grants from shared-vpc.tf fixture are necessary for successful connector deployment
module.project-service.google_project_iam_member.shared_vpc_host_robots["roles/compute.networkUser:cloudservices"]:
condition: []
project: test-host
role: roles/compute.networkUser
module.project-service.google_project_iam_member.shared_vpc_host_robots["roles/compute.networkUser:vpcaccess"]:
condition: []
project: test-host
role: roles/compute.networkUser
counts: counts:
google_cloud_run_v2_service: 1 google_cloud_run_v2_service: 1
google_vpc_access_connector: 1 google_vpc_access_connector: 1
modules: 4 modules: 4
resources: 55 resources: 59
outputs: {} outputs: {}