Implement IAM API

IAM is currently buried inside of our Pub/Sub code, but should be abstracted to be used with any API that supports it:

@tseaver

@jgeewax

I haven't been able to get through to IAM with gRPC: stephenplusplus/grpc-usage-question#1

@jgeewax

@jgeewax for the libraries that use gRPC, there are no IAM endpoints defined within each service's proto files. For an HTTP API like Compute, can you give me an example of a URL where you think I can find an IAM endpoint?

I've tried on an autoscaler to test, https://www.googleapis.com/compute/v1/projects/nth-circlet-705/zones/us-central1-a/autoscalers/gcloud-tests-autoscaler-1468433795482/getIamPolicy -- 404, but I'm not sure if that was a good guess for where I could find an IAM endpoint.

I'm pretty sure that you use the iam_policy.proto file to send the request with the right resource name, but to the pubsub endpoint... ( https://cloud.google.com/pubsub/reference/rpc/google.iam.v1 and https://github.com/googleapis/googleapis/blob/master/google/iam/v1/iam_policy.proto ) No?

Pub/Sub is supported using IAM: https://github.com/GoogleCloudPlatform/gcloud-node/blob/master/lib/pubsub/iam.js. It's Logging that's been an issue.

Maybe you can take a look at the repo I put together to demonstrate the problem. If it's an easy solution, it should be easy to catch where I went wrong. https://github.com/stephenplusplus/grpc-usage-question -- you can replace the URL at line 19 to send the request to a different "base URL". In my experience, I either get a "Not Implemented" error when I send the request to a Logging URL, or an error like the ones I describe in the issue: stephenplusplus/grpc-usage-question#1

Just worth mentioning, all of the above only affects the gRPC APIs (Logging, PubSub) -- there is still Compute, Resource Manager, and Storage that I don't know how to make IAM requests for.

The demo looks like it's dealing with resource manager -- which you're saying is giving you a cancelled error (in the issue), right? For Logging, I don't see any IAM support there -- what resource are you trying to :getIamPolicy on ?

The demo looks like it's dealing with resource manager -- which you're
saying is giving you a cancelled error (in the issue), right?

Yeah, I just wanted to make the repo as easy as possible to reproduce, since everyone should have a "Project" resource (but maybe not a "Sink" or "Log", etc)

For Logging, I don't see any IAM support there -- what resource are you
trying to :getIamPolicy on ?

I don't see any IAM support either, which is what I'm saying... only Pub/Sub seems to have a way to use IAM.

I get a Not Implemented API error when I try to send this request to the Logging base URL:

var protoOpts = {
  service: 'IAMPolicy',
  method: 'getIamPolicy'
};

var reqOpts = {
  resource: 'a/log/resource'
};

Right -- the frame error for gRPC with IAM on Resource Manager is legit, going to dig more. The Logging piece... I don't believe it supports IAM. AKA, your work is done for Logging.... If the REST methods aren't defined in the docs, then it's not supported.

Good - that's what's expected.

Cool, thanks for checking into this stuff!

OK -- Resource Manager's docs are lying : they don't support gRPC today. Carry on.

Only Compute remains. Issue opened: googleapis/nodejs-compute#28

feat: add support for microseconds precision (#1192)

chore: add dev deps for cloud rad (#1192)

chore(deps): update dependency sinon to v15 (#1192)

chore(deps): update dependency sinon to v15 (googleapis#1192)

feat: [compute] Update Compute Engine v1beta API to revision 20260422 (…

chore: release main (#8264)

Navigation Menu

Repository navigation

Implement IAM API #1192

13 remaining items

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Implement IAM API #1192

Description

Activity

dhermes commented on Mar 30, 2016

stephenplusplus commented on Apr 14, 2016

stephenplusplus commented on Jul 13, 2016

jgeewax commented on Jul 14, 2016

stephenplusplus commented on Jul 14, 2016

jgeewax commented on Jul 14, 2016

stephenplusplus commented on Jul 14, 2016

stephenplusplus commented on Jul 14, 2016

jgeewax commented on Jul 14, 2016

jgeewax commented on Jul 14, 2016

stephenplusplus commented on Jul 14, 2016

jgeewax commented on Jul 14, 2016

13 remaining items

stephenplusplus commented on Dec 19, 2017

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions