HN Explorer

Ask HN: Google Cloud Permission Hell. Is it just me?

1 points by bamboozled ↗ HN
I've been experimenting with running apps on Google cloud and I have to say that I'm just constantly, constantly having permissions issues?

Oh you want cloud build to be able to pull from the artifacts registry? No!

2 comments

[ 2.4 ms ] story [ 17.0 ms ] thread
orbz
There’s unfortunately a fine line between secure-by-default and streamlined development. I’ve found that GCP is pretty decent at giving you enough feedback to know what principal and permission you need to tweak most of the time. Once you get the hang of it it’s a one time tweak, ideally in terraform, and you’ll never see the same issue again.
bamboozled
I've been using Terraform, my setup is basically three projects:

dev prod builds

Getting things playing nicely between those three in Terraform/Teragrunt has been no mean feet!