kaholo-plugin-google-cloud-iam

Kaholo plugin for integration with Google Cloud IAM Service. Google Cloud Identity and Access Management (IAM) is used to create and manage permissions for Google Cloud resources.

What you can do with Google Cloud IAM Plugin

Set Project IAM Policy: Manage access control and policies for your projects
Add Project Role Binding By Email: Add new members to your project’s IAM policy under a specified role by entering their email address
Add Project Role Binding To Service Account: Add project roles to service accounts Optionally, you can use IAM Conditions to grant access to project members only if specified conditions are met
Get Project IAM Policy: Get the IAM policy for a specified project
List Service Accounts: List service accounts for a specified project
List Roles: List roles within a specified project

Authentication

This plugin requires Service Account Credentials as provided by GCP in order to authenticate to the Google Cloud services.

Once you have created your Google Cloud Service Account, create and download the Key in JSON format from the Google Cloud Platform.

The Key must be stored as a new entry in the Kaholo Vault and can be used within each Method by selecting the corresponding Vault entry from the Credentials field.

Entire JSON file content needs to be added in the Vault.

You can see more information on how to create service account keys here.

Settings

Service Account Credentials (Vault) Required If Not In Action - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Default Project ID (String) Required If Not In Action - Default project to use in methods. Learn More

Method: Set Project IAM Policy

Set the specified project's IAM Policy.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More
Policy JSON (Text) Required - The policy to apply to the project, in JSON format. Can be provided either as a JSON string, a path to a local file on the agent, or as JS object from code. Learn More

Method: Add Project Role Binding By Email

Add new role bindings to the IAM policy of the specified project, using the specified members emails.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More
Members Emails (Text) Required - The emails of the new members to add to the project's IAM policy, under the specified role. Email can either refer to a user email or to a service account's email. Can enter multiple values by separating each with a new line. Learn More
Roles (Autocomplete) Required - The roles to apply to specified members. Can enter multiple values by entering roles as an array from code. Learn More
Condition (Text) Optional - Will apply all new bindings with specified condition. You can use IAM Conditions to define and enforce conditional, attribute-based access control for Google Cloud resources. Learn More

Method: Add Project Role Binding To Service Account

Add new role bindings for the specified service account in the IAM policy of specified project.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More
Service Account (Autocomplete) Required - Add the role binding for the specified service account. Learn More
Roles (Autocomplete) Required - The roles to apply to the service account. Can enter multiple values by entering roles as an array from code. Learn More
Condition (Text) Optional - Will apply all new bindings with specified condition. You can use IAM Conditions to define and enforce conditional, attribute-based access control for Google Cloud resources. Learn More

Method: Get Project IAM Policy

Get the project's IAM policy.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More

Method: List Service Accounts

List all service accounts in the specified project.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More

Method: List Roles

List all predefined Google IAM roles and all custom roles in the specified project.

Parameters

Service Account Credentials (Vault) Required If Not In Settings - A Vaulted JSON document containing Google Cloud Service Account credentials as provided by GCP. Learn More
Project (Autocomplete) Required If Not In Settings - Project name. Learn More

kaholo / kaholo-plugin-google-cloud-iam Goto Github PK