container analysis notes IAM policy support

[mvanholsteijn]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment. If the issue is assigned to the "modular-magician" user, it is either in the process of being autogenerated, or is planned to be autogenerated soon. If the issue is assigned to a user, that user is claiming responsibility for the issue. If the issue is assigned to "hashibot", a community member has claimed the issue already.

Description

Description

Each Container Analysis note has an IAM policy, but there is no support in the terraform provider.

New or Affected Resource(s)

• google_container_analysis_note_iam_policy
• google_container_analysis_note_iam_binding
• google_container_analysis_note_iam_member

Potential Terraform Configuration

resource "google_container_analysis_note_iam_binding" "note_viewer" {
  note    = google_container_analysis_note_iam_binding.note.id
  role    = "roles/containeranalysis.notes.occurrences.viewer"
  members = [
    "user:[email protected]",
  ]
}

References

• https://cloud.google.com/binary-authorization/docs/creating-attestors-cli#set_permissions_on_the_note
• https://cloud.google.com/container-registry/docs/reference/rest/v1/projects.notes/setIamPolicy
• container analysis notes IAM policy support #7698

[mmalecki]

This is the only part missing in Terraforming this setup for me, so I'll go ahead and grab this one!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.