GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
Restrict Third-Party CSP Marketplace software to GC-approved products.
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
**Describe the bug**
In the landingzone accelerator, a policy is being set to disable the public market place and force the use of private market place at the organization level. The issue with the implementation of this policy is, by default all of the products and resources in GCP are blocked.
The guard rail is only focused on 3rd party services.
**To Reproduce**
Deploy pubsec policies to satisfy guardrail 12
Try to impliment the kubernetes engine(as an example)
Public market place blocked

No products available

Private Marketplace is empty

**Expected behavior**
3rd party applications and resources blocked in the private market.
1st party applications and resources in the market allowed

**Screenshots**
If applicable, add screenshots to help explain your problem.
**Additional context**
IMO to fix this issue, there should be a policy to enable the private market place and a private market place collection that contains all the GCP first part applications, services and resources.
Having a programmatic way to approve all first party GCP products would be ideal. Doing the private market place collection by hand is brutal.
Contributor guide
Assessment
This issue has not been assessed yet.