Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

PROD-2698: clarify permissions needed for GCP #5266

Merged
merged 2 commits into from
Sep 11, 2024
Merged

PROD-2698: clarify permissions needed for GCP #5266

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1877a29
clarify permissions needed for GCP
eastandwestwind Sep 6, 2024
8be5d63
changelog
eastandwestwind Sep 6, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,9 @@ The types of changes are:
### Developer Experience
- Added performance mark timings to debug logs for fides.js [#5245](https://github.com/ethyca/fides/pull/5245)

### Added
- Clarify GCP service account permissions when setting up Google Cloud SQL for Postgres in Admin-UI [#5245](https://github.com/ethyca/fides/pull/5266)

### Changed
- Validate no path in `server_host` var for CLI config; if there is one then take only up until the first forward slash

Expand Down
16 changes: 10 additions & 6 deletions ...s/admin-ui/src/features/integrations/integration-type-info/googleCloudSQLPostgresInfo.tsx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,17 +50,21 @@ export const GoogleCloudSQLPostgresOverview = () => (
For detection and discovery, Fides requires a user with the SELECT
permission on the database. If you intend to automate governance for DSR
or Consent, Fides requires a user with the SELECT, UPDATE, and DELETE
The permissions allow Fides to read the schema of, and data stored in
tables, and fields as well as write restricted updates based on your
policy configurations to tables you specify as part of DSR and Consent
permission. The permissions allow Fides to read the schema of, and data
stored in tables, and fields as well as write restricted updates based
on your policy configurations to tables you specify as part of DSR and
orchestration. For a complete list of permissions view the Google Cloud
SQL for Postgres DB documentation.
</InfoText>
<InfoText>
The following GCP service account permissions are needed when setting up
Google Cloud SQL for Postgres.
</InfoText>
<InfoHeading text="Permissions list" />
<InfoUnorderedList>
<ListItem>GRANT SELECT</ListItem>
<ListItem>GRANT UPDATE</ListItem>
<ListItem>GRANT DELETE</ListItem>
<ListItem>cloudsql.instances.connect</ListItem>
<ListItem>cloudsql.instances.get</ListItem>
<ListItem>cloudsql.instances.login</ListItem>
</InfoUnorderedList>
</ShowMoreContent>
</>
Expand Down
Loading