Kaholo plugin for integration with Google Cloud IAM Service. Google Cloud Identity and Access Management (IAM) is used to create and manage permissions for Google Cloud resources.
What you can do with Google Cloud IAM Plugin
- Set Project IAM Policy: Manage access control and policies for your projects
- Add Project Role Binding By Email: Add new members to your project’s IAM policy under a specified role by entering their email address
- Add Project Role Binding To Service Account: Add project roles to service accounts Optionally, you can use IAM Conditions to grant access to project members only if specified conditions are met
- Get Project IAM Policy: Get the IAM policy for a specified project
- List Service Accounts: List service accounts for a specified project
- List Roles: List roles within a specified project
This plugin requires Service Account Credentials as provided by GCP in order to authenticate to the Google Cloud services.
Once you have created your Google Cloud Service Account, create and download the Key in JSON format from the Google Cloud Platform.
The Key must be stored as a new entry in the Kaholo Vault and can be used within each Method by selecting the corresponding Vault entry from the Credentials field.
Entire JSON file content needs to be added in the Vault.
You can see more information on how to create service account keys here.
- Service Account Credentials (Vault) Required If Not In Action - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Default Project ID (String) Required If Not In Action - Default project to use in methods. Learn More
Set the specified project's IAM Policy.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More
- Policy JSON (Text) Required - The policy to apply to the project, in JSON format. Can be provided either as a JSON string, a path to a local file on the agent, or as JS object from code. Learn More
Add new role bindings to the IAM policy of the specified project, using the specified members emails.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More
- Members Emails (Text) Required - The emails of the new members to add to the project's IAM policy, under the specified role. Email can either refer to a user email or to a service account's email. Can enter multiple values by separating each with a new line. Learn More
- Roles (Autocomplete) Required - The roles to apply to specified members. Can enter multiple values by entering roles as an array from code. Learn More
- Condition (Text) Optional - Will apply all new bindings with specified condition. You can use IAM Conditions to define and enforce conditional, attribute-based access control for Google Cloud resources. Learn More
Add new role bindings for the specified service account in the IAM policy of specified project.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More
- Service Account (Autocomplete) Required - Add the role binding for the specified service account. Learn More
- Roles (Autocomplete) Required - The roles to apply to the service account. Can enter multiple values by entering roles as an array from code. Learn More
- Condition (Text) Optional - Will apply all new bindings with specified condition. You can use IAM Conditions to define and enforce conditional, attribute-based access control for Google Cloud resources. Learn More
Get the project's IAM policy.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More
List all service accounts in the specified project.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More
List all predefined Google IAM roles and all custom roles in the specified project.
- Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
- Project (Autocomplete) Required If Not In Settings - Project name. Learn More