GoogleCloudPlatform / GoogleCloudPlatform/pubsec-declarative-toolkit
hub-env: selectively comment depends-on: annotations across the package to allow for deployment of the SAs
- Dominant language
- Shell
- Stars
- 36
- Forks
- 26
- PR merge metrics
- No merged PRs in 30d
Description
as part of https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/issues/446#issuecomment-1777003911
also fix the depends on the project yaml
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/issues/596
disable
https://github.com/GoogleCloudPlatform/pubsec-declarative-toolkit/blob/main/solutions/project/hub-env/project-iam.yaml#L25
```
Warning UpdateFailed 34s (x14 over 16m) iampolicymember-controller Update call failed: error setting policy member: error applying changes: summary: Error applying IAM policy for organization "59485982875": Error setting IAM policy for organization "59485982875": googleapi: Error 400: Role (organizations/59485982875/roles/FortigateSdnViewer) does not exist in the resource's hierarchy., badRequest
root_@cloudshell:~/pdt-ls/obriensystems/pubsec-declarative-toolkit/solutions/project (kcc-boot-ls)$ kubectl describe iampolicymember.iam.cnrm.cloud.google.com/fortigatesdn-sa-fortigatesdnviewer-role-permissions -n networking
checking custom roles
didnt turn off depends on on custom roles
name: hub-fortigatesdnreader-role
do another live apply
iampolicymember.iam.cnrm.cloud.google.com/fortigatesdn-sa-fortigatesdnviewer-role-permissions reconcile successful
fixed
Warning UpdateFailed 3m16s (x17 over 25m) iampolicymember-controller Update call failed: error setting policy member: error applying changes: summary: Error applying IAM policy for organization "59485982875": Error setting IAM policy for organization "59485982875": googleapi: Error 400: Role (organizations/59485982875/roles/FortigateSdnViewer) does not exist in the resource's hierarchy., badRequest
Normal UpToDate 71s iampolicymember-controller The resource is up to date
```
Contributor guide
Assessment
This issue has not been assessed yet.