-
20230808: todo: add project level iam access to https://github.com/GoogleCloudPlatform/pbmm-on-gcp-onboarding/blob/main/environments/common/iam-groups.auto.tfvars#L18
In addition to #263 add altern…
-
### TL;DR
I'm using the `southamerica-east1` region. So, I set the content of [production.auto.example.tfvars](https://github.com/terraform-google-modules/terraform-example-foundation/blob/master/4…
-
Note: #932 was also for this test, but it was closed more than 10 days ago. So, I didn't mark it flaky.
----
commit: 9f256fc8e5829bb559b6eb26cd6b92b05e7f33db
buildURL: [Build Status](https://source.…
-
Hi All, I am trying to mark the extension key usages to "critical" when setting the timestamping bit using terraform. Is there a guide on how to set EKU in google_privateca_certificate_authority of ty…
-
When trying to use the GOOGLECLOUD store type to perform code signing with a Google hosted private key, the project/keyname entered in attribute is interpreted as a relative file location and an inco…
-
20240307: update
Got past 0-bootstrap - working 1-org below
#1133
see
https://github.com/terraform-google-modules/terraform-example-foundation/issues/940
https://github.com/terraform-google-m…
-
Good morning,
I create an IAM service account, KMS keyring and key in my own GCP account.
```
#Service Account for KMS
resource "google_service_account" "encryption_at_rest" {
count …
-
Failure rate: 17/28 since added 2022-11-19 (60.7%)
Impacted tests:
- TestAccEventarcGoogleChannelConfig_cryptoKeyUpdate
Nightly builds:
- https://ci-oss.hashicorp.engineering/buildCo…
-
**Problem**
tink-gcpkms:1.7.0 has dependencies to google-api-services-cloudkms:v1-rev108-1.25.0 and google-api-client:1.33.2. When trying to bump google-api-client to a version later than 1.35.2, thi…
-
This depends on #445.
If we have KMS signing, we should consider key generation using the KMS: currently the process of rotating KMS keys would be very manual.
Key update process for a TUF key l…