zecfoundation
/
cloud-foundation-fabric
mirror of https://github.com/ZcashFoundation/cloud-foundation-fabric.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
cloud-foundation-fabric/fast/stages/01-resman/IAM.md

49 lines
6.1 KiB
Markdown
Raw Normal View History

Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
# IAM bindings reference
Legend: <code>+</code> additive, <code>•</code> conditional.
## Organization <i>[org_id #0]</i>
| members | roles |
|---|---|
Use tags and tag-based IAM conditions in FAST (#553) * organization module * folder module * project module * fix project binding * environment tags * use id instead of name for references * environment bindings * conditional org policy admin binding via tags * rename pf service accounts and buckets * update IAM docs * kms module * compute-vm * fix compute-vm * tfdoc
2022-02-20 02:26:30 -08:00
|<b>dev-resman-dp-0</b><br><small><i>serviceAccount</i></small>|[roles/orgpolicy.policyAdmin](https://cloud.google.com/iam/docs/understanding-roles#orgpolicy.policyAdmin) <code>+</code><code>•</code><br>[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code>|
|<b>dev-resman-pf-0</b><br><small><i>serviceAccount</i></small>|[roles/orgpolicy.policyAdmin](https://cloud.google.com/iam/docs/understanding-roles#orgpolicy.policyAdmin) <code>+</code><code>•</code><br>[roles/billing.costsManager](https://cloud.google.com/iam/docs/understanding-roles#billing.costsManager) <code>+</code><br>[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code>|
|<b>prod-resman-dp-0</b><br><small><i>serviceAccount</i></small>|[roles/orgpolicy.policyAdmin](https://cloud.google.com/iam/docs/understanding-roles#orgpolicy.policyAdmin) <code>+</code><code>•</code><br>[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code>|
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>prod-resman-net-0</b><br><small><i>serviceAccount</i></small>|[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code><br>[roles/compute.orgFirewallPolicyAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.orgFirewallPolicyAdmin) <code>+</code><br>[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) <code>+</code>|
Use tags and tag-based IAM conditions in FAST (#553) * organization module * folder module * project module * fix project binding * environment tags * use id instead of name for references * environment bindings * conditional org policy admin binding via tags * rename pf service accounts and buckets * update IAM docs * kms module * compute-vm * fix compute-vm * tfdoc
2022-02-20 02:26:30 -08:00
|<b>prod-resman-pf-0</b><br><small><i>serviceAccount</i></small>|[roles/orgpolicy.policyAdmin](https://cloud.google.com/iam/docs/understanding-roles#orgpolicy.policyAdmin) <code>+</code><code>•</code><br>[roles/billing.costsManager](https://cloud.google.com/iam/docs/understanding-roles#billing.costsManager) <code>+</code><br>[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code>|
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>prod-resman-sec-0</b><br><small><i>serviceAccount</i></small>|[roles/accesscontextmanager.policyAdmin](https://cloud.google.com/iam/docs/understanding-roles#accesscontextmanager.policyAdmin) <code>+</code><br>[roles/billing.user](https://cloud.google.com/iam/docs/understanding-roles#billing.user) <code>+</code>|
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
update IAM docs
2022-02-12 06:47:31 -08:00
## Folder <i>development</i>
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
| members | roles |
|---|---|
Use tags and tag-based IAM conditions in FAST (#553) * organization module * folder module * project module * fix project binding * environment tags * use id instead of name for references * environment bindings * conditional org policy admin binding via tags * rename pf service accounts and buckets * update IAM docs * kms module * compute-vm * fix compute-vm * tfdoc
2022-02-20 02:26:30 -08:00
|<b>dev-resman-dp-0</b><br><small><i>serviceAccount</i></small>|[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) <br>[roles/logging.admin](https://cloud.google.com/iam/docs/understanding-roles#logging.admin) <br>[roles/owner](https://cloud.google.com/iam/docs/understanding-roles#owner) <br>[roles/resourcemanager.folderAdmin](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.folderAdmin) <br>[roles/resourcemanager.projectCreator](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.projectCreator) <br>[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) |
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>dev-resman-pf-0</b><br><small><i>serviceAccount</i></small>|[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) |
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
update IAM docs
2022-02-12 06:47:31 -08:00
## Folder <i>networking</i>
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
| members | roles |
|---|---|
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>gcp-network-admins</b><br><small><i>group</i></small>|[roles/editor](https://cloud.google.com/iam/docs/understanding-roles#editor) |
|<b>prod-resman-net-0</b><br><small><i>serviceAccount</i></small>|[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) <br>[roles/logging.admin](https://cloud.google.com/iam/docs/understanding-roles#logging.admin) <br>[roles/owner](https://cloud.google.com/iam/docs/understanding-roles#owner) <br>[roles/resourcemanager.folderAdmin](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.folderAdmin) <br>[roles/resourcemanager.projectCreator](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.projectCreator) |
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
update IAM docs
2022-02-12 06:47:31 -08:00
## Folder <i>production</i>
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
| members | roles |
|---|---|
Use tags and tag-based IAM conditions in FAST (#553) * organization module * folder module * project module * fix project binding * environment tags * use id instead of name for references * environment bindings * conditional org policy admin binding via tags * rename pf service accounts and buckets * update IAM docs * kms module * compute-vm * fix compute-vm * tfdoc
2022-02-20 02:26:30 -08:00
|<b>prod-resman-dp-0</b><br><small><i>serviceAccount</i></small>|[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) <br>[roles/logging.admin](https://cloud.google.com/iam/docs/understanding-roles#logging.admin) <br>[roles/owner](https://cloud.google.com/iam/docs/understanding-roles#owner) <br>[roles/resourcemanager.folderAdmin](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.folderAdmin) <br>[roles/resourcemanager.projectCreator](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.projectCreator) <br>[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) |
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>prod-resman-pf-0</b><br><small><i>serviceAccount</i></small>|[roles/compute.xpnAdmin](https://cloud.google.com/iam/docs/understanding-roles#compute.xpnAdmin) |
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
update IAM docs
2022-02-12 06:47:31 -08:00
## Folder <i>sandbox</i>
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
| members | roles |
|---|---|
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>dev-resman-sbox-0</b><br><small><i>serviceAccount</i></small>|[roles/logging.admin](https://cloud.google.com/iam/docs/understanding-roles#logging.admin) <br>[roles/owner](https://cloud.google.com/iam/docs/understanding-roles#owner) <br>[roles/resourcemanager.folderAdmin](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.folderAdmin) <br>[roles/resourcemanager.projectCreator](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.projectCreator) |
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
update IAM docs
2022-02-12 06:47:31 -08:00
## Folder <i>security</i>
Add utility to extract IAM bindings from state (#503) * add utility to extract IAM bindings from state * TODO * TODO * output one row per role/member pairs * sorting * rename, delete spurious file * generalize output functions * generate IAM.md * fix org id * add link to role in markdown * fix org id * replace organization ids
2022-02-05 08:34:43 -08:00
| members | roles |
|---|---|
update IAM docs
2022-02-12 06:47:31 -08:00
|<b>gcp-security-admins</b><br><small><i>group</i></small>|[roles/viewer](https://cloud.google.com/iam/docs/understanding-roles#viewer) |
|<b>prod-resman-sec-0</b><br><small><i>serviceAccount</i></small>|[roles/logging.admin](https://cloud.google.com/iam/docs/understanding-roles#logging.admin) <br>[roles/owner](https://cloud.google.com/iam/docs/understanding-roles#owner) <br>[roles/resourcemanager.folderAdmin](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.folderAdmin) <br>[roles/resourcemanager.projectCreator](https://cloud.google.com/iam/docs/understanding-roles#resourcemanager.projectCreator) |