Add diagram to delegated role grants example
This commit is contained in:
parent
50d6105bf0
commit
39712b6793
|
@ -33,3 +33,9 @@ The example's feed tracks changes to Google Compute instances, and the Cloud Fun
|
||||||
<a href="./quota-monitoring" title="Compute Engine quota monitoring"><img src="./quota-monitoring/diagram.png" align="left" width="280px"></a> This [example](./quota-monitoring) shows a practical way of collecting and monitoring [Compute Engine resource quotas](https://cloud.google.com/compute/quotas) via Cloud Monitoring metrics as an alternative to the recently released [built-in quota metrics](https://cloud.google.com/monitoring/alerts/using-quota-metrics). A simple alert on quota thresholds is also part of the example.
|
<a href="./quota-monitoring" title="Compute Engine quota monitoring"><img src="./quota-monitoring/diagram.png" align="left" width="280px"></a> This [example](./quota-monitoring) shows a practical way of collecting and monitoring [Compute Engine resource quotas](https://cloud.google.com/compute/quotas) via Cloud Monitoring metrics as an alternative to the recently released [built-in quota metrics](https://cloud.google.com/monitoring/alerts/using-quota-metrics). A simple alert on quota thresholds is also part of the example.
|
||||||
|
|
||||||
<br clear="left">
|
<br clear="left">
|
||||||
|
|
||||||
|
## Delegated Role Grants
|
||||||
|
|
||||||
|
<a href="./iam-delegated-role-grants" title="Delegated Role Grants"><img src="./iam-delegated-role-grants/diagram.png" align="left" width="280px"></a> This [example](./iam-delegated-role-grants) shows how to restrict service usage to restrict service usage through delegated role grants.
|
||||||
|
|
||||||
|
<br clear="left">
|
||||||
|
|
|
@ -16,6 +16,10 @@ Clone this repository or [open it in cloud shell](https://ssh.cloud.google.com/c
|
||||||
- `terraform init`
|
- `terraform init`
|
||||||
- `terraform apply -var project_id=my-project-id 'project_administrators=["user:project-admin@example.com"]'`
|
- `terraform apply -var project_id=my-project-id 'project_administrators=["user:project-admin@example.com"]'`
|
||||||
|
|
||||||
|
At this point the project should have a set of role that allow the project administrators to do the following:
|
||||||
|
|
||||||
|
<img src="diagram.png" width="640px">
|
||||||
|
|
||||||
Once done testing, you can clean up resources by running `terraform destroy`.
|
Once done testing, you can clean up resources by running `terraform destroy`.
|
||||||
|
|
||||||
## Auditing Roles
|
## Auditing Roles
|
||||||
|
|
Binary file not shown.
After Width: | Height: | Size: 26 KiB |
Loading…
Reference in New Issue