Skip to content

[Enchancement] Clearly document required GCP org-level IAM permissions/Org Policies and provide provisioning scripts #158

@bbhuston

Description

@bbhuston

Issue: The global-multilayer-demo currently does not explicitly document, or provide ready-to-use provisioning scripts, for some important pre-requisite org-level settings. Specifically, information related to Org Policies and the super-user IAM permissions needed to apply these Org Policies is missing.

Proposed enhancement: Create a top-level folder in repo for the org-level configurations (i.e., policies/IAM) that users can optionally use for troubleshooting purposes. This folder will contain:

  • A README which explains exactly what Org Policies and IAM permissions are required, and example CLI commands that can be used to provision these resources
  • A standalone Terraform module that defines any necessary Org Policies
  • A reference in the main README which points to this top-level directory as a suggested troubleshooting step

If the end user does not have the ability to make these org-level configurations themselves, then this README will serve as a reference that can be shared with a Platform Admin who can apply these changes.

Metadata

Metadata

Assignees

Labels

documentationImprovements or additions to documentationenhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions