Skip to content
This repository has been archived by the owner on Dec 15, 2022. It is now read-only.

Consider documenting API Requirement to use Cloud Resource Manager API #17

Open
AaronME opened this issue Dec 8, 2021 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@AaronME
Copy link

AaronME commented Dec 8, 2021

What problem are you facing?

I created the following resource:

apiVersion: cloudplatform.gcp.jet.crossplane.io/v1alpha1
kind: ProjectIAMBinding
metadata:
  name: secret-service-account-binding
spec:
  deletionPolicy: Delete
  forProvider:
    members:
      - serviceAccount:<serviceaccount>@xxx-xxx-xxx-xxx.iam.gserviceaccount.com
    project: xxx-xxx-xxx-xxx
    role: roles/secretmanager.secretAccessor
  providerConfigRef:
    name: default

I received an error:

        create failed: cannot apply: apply failed: Request `Set IAM Binding for
        role "roles/secretmanager.secretAccessor" on "project
        \"xxx-xxx-xxx-xxx\""` returned error: Error retrieving IAM policy
        for project "platform-core-initial": googleapi: Error 403: Cloud
        Resource Manager API has not been used in project 123456789 before or
        it is disabled. Enable it by visiting
        https://console.developers.google.com/apis/api/cloudresourcemanager.googleapis.com/overview?project=123456789
        then retry. If you enabled this API recently, wait a few minutes for the
        action to propagate to our systems and retry.

I had to enable cloudresourcemanager.googleapis.com to use the ProjectIAMBinding resource.

How could GCP Provider help solve your problem?

Document dependency on cloudresourcemanager api for cloudplatform iam bindings.

@AaronME AaronME added the enhancement New feature or request label Dec 8, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant