Skip to content

Commit 064c186

Browse files
authored
fix: Add missing permission to single-project deployments (#82)
* fix: Add missing permission to single-project deployments * chore: Pin google required version to 3.X
1 parent 932e492 commit 064c186

File tree

22 files changed

+40
-34
lines changed

22 files changed

+40
-34
lines changed

examples/organization/README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -61,15 +61,15 @@ module "secure-for-cloud_example_organization" {
6161
| Name | Version |
6262
|------|---------|
6363
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
64-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
65-
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | >= 3.67.0 |
64+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
65+
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | ~> 3.67.0 |
6666
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.21 |
6767

6868
## Providers
6969

7070
| Name | Version |
7171
|------|---------|
72-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
72+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
7373

7474
## Modules
7575

examples/organization/versions.tf

+2-2
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,11 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
google-beta = {
1010
source = "hashicorp/google-beta"
11-
version = ">= 3.67.0"
11+
version = "~> 3.67.0"
1212
}
1313
sysdig = {
1414
source = "sysdiglabs/sysdig"

examples/single-project-k8s/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -56,15 +56,15 @@ Notice that:
5656
| Name | Version |
5757
|------|---------|
5858
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.15.0 |
59-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
59+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
6060
| <a name="requirement_helm"></a> [helm](#requirement\_helm) | >=2.3.0 |
6161
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.19 |
6262

6363
## Providers
6464

6565
| Name | Version |
6666
|------|---------|
67-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
67+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
6868
| <a name="provider_helm"></a> [helm](#provider\_helm) | >=2.3.0 |
6969

7070
## Modules

examples/single-project-k8s/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ terraform {
33
required_providers {
44
google = {
55
source = "hashicorp/google"
6-
version = ">= 3.67.0"
6+
version = "~> 3.67.0"
77
}
88
sysdig = {
99
source = "sysdiglabs/sysdig"

examples/single-project/README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -59,15 +59,15 @@ module "secure-for-cloud_example_single-project" {
5959
| Name | Version |
6060
|------|---------|
6161
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
62-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
63-
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | >= 3.67.0 |
62+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
63+
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | ~> 3.67.0 |
6464
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.21 |
6565

6666
## Providers
6767

6868
| Name | Version |
6969
|------|---------|
70-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
70+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
7171

7272
## Modules
7373

examples/single-project/versions.tf

+2-2
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,11 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
google-beta = {
1010
source = "hashicorp/google-beta"
11-
version = ">= 3.67.0"
11+
version = "~> 3.67.0"
1212
}
1313
sysdig = {
1414
source = "sysdiglabs/sysdig"

modules/infrastructure/organization_sink/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@
66
| Name | Version |
77
|------|---------|
88
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
9-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
9+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
1010

1111
## Providers
1212

1313
| Name | Version |
1414
|------|---------|
15-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
15+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
1616

1717
## Modules
1818

modules/infrastructure/organization_sink/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
}
1010
}

modules/infrastructure/project_sink/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@
66
| Name | Version |
77
|------|---------|
88
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
9-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
9+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
1010

1111
## Providers
1212

1313
| Name | Version |
1414
|------|---------|
15-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
15+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
1616

1717
## Modules
1818

modules/infrastructure/project_sink/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
}
1010
}

modules/infrastructure/pubsub_push_http_subscription/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,13 @@ already exists in the project. It will create the topic if it doesn't exist.
99
| Name | Version |
1010
|------|---------|
1111
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
12-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
12+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
1313

1414
## Providers
1515

1616
| Name | Version |
1717
|------|---------|
18-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
18+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
1919

2020
## Modules
2121

modules/infrastructure/pubsub_push_http_subscription/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
}
1010
}

modules/infrastructure/secrets/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -6,13 +6,13 @@
66
| Name | Version |
77
|------|---------|
88
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
9-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
9+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
1010

1111
## Providers
1212

1313
| Name | Version |
1414
|------|---------|
15-
| <a name="provider_google"></a> [google](#provider\_google) | >= 3.67.0 |
15+
| <a name="provider_google"></a> [google](#provider\_google) | ~> 3.67.0 |
1616

1717
## Modules
1818

modules/infrastructure/secrets/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
}
1010
}

modules/services/cloud-bench/README.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,8 @@ module "cloud_benchmark_gcp" {
1717
| Name | Version |
1818
|------|---------|
1919
| <a name="requirement_terraform"></a> [terraform](#requirement\_terraform) | >= 0.14.0 |
20-
| <a name="requirement_google"></a> [google](#requirement\_google) | >= 3.67.0 |
21-
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | >= 3.67.0 |
20+
| <a name="requirement_google"></a> [google](#requirement\_google) | ~> 3.67.0 |
21+
| <a name="requirement_google-beta"></a> [google-beta](#requirement\_google-beta) | ~> 3.67.0 |
2222
| <a name="requirement_sysdig"></a> [sysdig](#requirement\_sysdig) | >= 0.5.21 |
2323

2424
## Providers

modules/services/cloud-bench/task/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
sysdig = {
1010
source = "sysdiglabs/sysdig"

modules/services/cloud-bench/trust_relationship/versions.tf

+2-2
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,11 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
google-beta = {
1010
source = "hashicorp/google-beta"
11-
version = ">= 3.67.0"
11+
version = "~> 3.67.0"
1212
}
1313
sysdig = {
1414
source = "sysdiglabs/sysdig"

modules/services/cloud-bench/versions.tf

+2-2
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,11 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
google-beta = {
1010
source = "hashicorp/google-beta"
11-
version = ">= 3.67.0"
11+
version = "~> 3.67.0"
1212
}
1313
sysdig = {
1414
source = "sysdiglabs/sysdig"

modules/services/cloud-connector/README.md

+1
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ No modules.
4848
| [google_eventarc_trigger.trigger](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/eventarc_trigger) | resource |
4949
| [google_project_iam_member.builder](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |
5050
| [google_project_iam_member.event_receiver](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |
51+
| [google_project_iam_member.run_viewer](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |
5152
| [google_project_iam_member.service_account_user_itself](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |
5253
| [google_project_iam_member.token_creator](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/project_iam_member) | resource |
5354
| [google_storage_bucket.bucket](https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/storage_bucket) | resource |

modules/services/cloud-connector/cloud_run.tf

+5
Original file line numberDiff line numberDiff line change
@@ -122,3 +122,8 @@ resource "google_cloud_run_service_iam_member" "run_invoker" {
122122
project = google_cloud_run_service.cloud_connector.project
123123
location = google_cloud_run_service.cloud_connector.location
124124
}
125+
126+
resource "google_project_iam_member" "run_viewer" {
127+
member = "serviceAccount:${var.cloud_connector_sa_email}"
128+
role = "roles/run.viewer"
129+
}

test/fixtures/organization/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
random = {
1010
version = ">= 3.1.0"

test/fixtures/single-project/versions.tf

+1-1
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ terraform {
44
required_providers {
55
google = {
66
source = "hashicorp/google"
7-
version = ">= 3.67.0"
7+
version = "~> 3.67.0"
88
}
99
random = {
1010
version = ">= 3.1.0"

0 commit comments

Comments
 (0)