search

cruise-automation / rbacsync

Automatically sync groups into Kubernetes RBAC
Apache License 2.0
238 stars 33 forks source link

Accounts setup documentation #5

Closed pesimon closed 5 years ago

pesimon commented 5 years ago

Hi,

Unfortunately I wasn't able to set this up. Since the whole GSuite delegation account and GCP service account and thier permission are quite complex to setup, some screenshots might be helpful. I know it's a very young project but it may raise adoption and people may be willing to maintain documention as well.

Hence, the linked Fin.com is not accessible outside the US but Google cache has it archived (not sure how long)

https://webcache.googleusercontent.com/search?q=cache:Q5VZUOE3cNgJ:https://www.fin.com/post/2017/10/navigating-google-suite-directory-api+&cd=1&hl=en&ct=clnk&gl=de

Cheers, Peter

stevvooe commented 5 years ago

What step didn't work? Where did you run into trouble?

Unfortunately, this process is indeed challenging to setup. We've put together a detailed how to, so make sure you follow the instructions carefully. I'd recommend also reading the Google guide at https://developers.google.com/admin-sdk/directory/v1/guides/delegation. If that doesn't work, you'll have to reach out to GSuite/GCP support for help debugging. Make sure to double check each step, as they are all important. You can try it without a robot account and just use your personal account to make it easier.

As far as maintaining a more detail guide for this project, keeping it up to date will be challenging as changes are made to the Google GSuite UI and the Google Cloud Console. If someone were to submit a guide and maintain, we could likely accept it.

stevvooe commented 5 years ago

@pesimon Thanks for the report, but without more information, we won't be able to improve on the documentation. I'm going to close this for now. If you have more information in the future on what step went awry, please feel free to comment on this issue or open a new one.