mirror of
https://github.com/edgelesssys/constellation.git
synced 2025-07-25 00:05:17 -04:00
gcp: support projects with no default permissions (#3656)
* helm/gcp: use service account in operator and joinservice * helm: format operator testdata * terraform/iam: create additional service account for VMs This service account is used in the following commits and is attached to the VMs * config: pass VM service account from iam create to cluster create via config * cli/iamcreate: limit name prefix length * docs: add minimal gcp IAM permissions
This commit is contained in:
parent
83e08e3e37
commit
66815a4a47
42 changed files with 771 additions and 466 deletions
|
@ -29,6 +29,9 @@ var (
|
|||
regionRegex = regexp.MustCompile(`^\w+-\w+[0-9]$`)
|
||||
// Source: https://cloud.google.com/resource-manager/reference/rest/v1/projects.
|
||||
gcpIDRegex = regexp.MustCompile(`^[a-z][-a-z0-9]{4,28}[a-z0-9]$`)
|
||||
|
||||
// We currently append 6 characters to the prefix, therefore we remove 6 characters from the gcpIDRegex.
|
||||
gcpPrefixRegex = regexp.MustCompile(`^[a-z][-a-z0-9]{4,22}[a-z0-9]$`)
|
||||
)
|
||||
|
||||
// newIAMCreateCmd returns a new cobra.Command for the iam create parent command. It needs another verb, and does nothing on its own.
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue