v0.5.0
Features
- Deploy gcr subscriptions for each project in organizational mode (#64)
Breaking Change: This adds a new variable called
project_scan_idswhich specifies the IDs of the projects where a subscription must be created for the expectedgcrtopic in each project, and removes thecreate_gcr_topicvariable which may be confusing to the users, since some of the scanned projects may or may not contain this topic, and verifying if it exists is not an option.
Bug Fixes
- bench: Service Account Role binding (#65)
Fixes issue where we were binding the custom role (which includes the storage.buckets.getIamPolicy permission) to the service account as a resource instead of as an identity. This meant that the service account did not get this permission applied, and was getting 403 errors on certain policies.
- doc: Add
project_idto usage
Small Modifications
- Delete unused inspec folder (#61)