forseti-security / terraform-google-forseti

A Terraform module for installing Forseti on GCP
Apache License 2.0
132 stars 127 forks source link

Fix race condition where the workload identity is not setup prior to service account binding #606

Closed gkowalski-google closed 4 years ago

gkowalski-google commented 4 years ago

Update GKE module and examples to use the workload identity namespace from the GKE module. In the case of the GKE example (existing cluster) will default to the identity namespace and allow for users to update.

This PR was previously submitted to a release branch to resolve this issue, but ended up getting reverted due to another issue.

Did some testing with a Forseti GKE cluster.

Note: The secure boot control is disabled in this PR because this functionality is no longer working. The issue has been reproduced with the main branch of this repo. Created issue #607

Resolves #298

gkowalski-google commented 4 years ago

/gcbrun