GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit

Restrict Third-Party CSP Marketplace software to GC-approved products.

Open
#293 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
36
Forks
26
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
In the landingzone accelerator, a policy is being set to disable the public market place and force the use of private market place at the organization level. The issue with the implementation of this policy is, by default all of the products and resources in GCP are blocked.

The guard rail is only focused on 3rd party services.

**To Reproduce**
Deploy pubsec policies to satisfy guardrail 12
Try to impliment the kubernetes engine(as an example)
Public market place blocked
![image](https://user-images.githubusercontent.com/367922/221718253-c65f780c-eac4-4c2d-aa21-e06ed5e3b1c0.png)

No products available
![image](https://user-images.githubusercontent.com/367922/221717779-e432ddbe-6e26-4e75-a48e-5aa033d04f87.png)

Private Marketplace is empty
![image](https://user-images.githubusercontent.com/367922/221718311-6817a1ef-8030-49b6-90dd-5e86eb7055ff.png)

**Expected behavior**
3rd party applications and resources blocked in the private market.
1st party applications and resources in the market allowed
![image](https://user-images.githubusercontent.com/367922/221717910-1c8ac4eb-303b-4494-9ff8-2b86a2dcdb4d.png)

**Screenshots**
If applicable, add screenshots to help explain your problem.

**Additional context**

IMO to fix this issue, there should be a policy to enable the private market place and a private market place collection that contains all the GCP first part applications, services and resources.

Having a programmatic way to approve all first party GCP products would be ideal. Doing the private market place collection by hand is brutal.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.