Skip to content

Commit ba538ae

Browse files
make iam condition ga (#3729) (#2255)
* move iam condition block to ga * add docs for condition and update docs for ga Signed-off-by: Modular Magician <[email protected]>
1 parent 1f5062b commit ba538ae

File tree

4 files changed

+19
-7
lines changed

4 files changed

+19
-7
lines changed

.changelog/3729.txt

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
```release-note:enhancement
2+
iam: made the `condition` block GA for all IAM resource and datasource types.
3+
```

website/docs/d/iam_policy.html.markdown

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,15 @@ each accept the following arguments:
8787
* `log_type` (Required) Defines the logging level. `DATA_READ`, `DATA_WRITE` and `ADMIN_READ` capture different types of events. See [the audit configuration documentation](https://cloud.google.com/resource-manager/reference/rest/Shared.Types/AuditConfig) for more details.
8888
* `exempted_members` (Optional) Specifies the identities that are exempt from these types of logging operations. Follows the same format of the `members` array for `binding`.
8989

90+
* `condition` - (Optional) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
91+
92+
The `condition` block supports:
93+
94+
* `expression` - (Required) Textual representation of an expression in Common Expression Language syntax.
95+
96+
* `title` - (Required) A title for the expression, i.e. a short string describing its purpose.
97+
98+
* `description` - (Optional) An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
9099

91100
## Attributes Reference
92101

website/docs/r/google_project_iam.html.markdown

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ data "google_iam_policy" "admin" {
4848
}
4949
```
5050

51-
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
51+
With IAM Conditions:
5252

5353
```hcl
5454
resource "google_project_iam_policy" "project" {
@@ -88,7 +88,7 @@ resource "google_project_iam_binding" "project" {
8888
}
8989
```
9090

91-
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
91+
With IAM Conditions:
9292

9393
```hcl
9494
resource "google_project_iam_binding" "project" {
@@ -117,7 +117,7 @@ resource "google_project_iam_member" "project" {
117117
}
118118
```
119119

120-
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
120+
With IAM Conditions:
121121

122122
```hcl
123123
resource "google_project_iam_member" "project" {
@@ -183,7 +183,7 @@ will not be inferred from the provider.
183183

184184
* `audit_log_config` - (Required only by google\_project\_iam\_audit\_config) The configuration for logging of each type of permission. This can be specified multiple times. Structure is documented below.
185185

186-
* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
186+
* `condition` - (Optional) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
187187
Structure is documented below.
188188

189189
---

website/docs/r/google_service_account_iam.html.markdown

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -63,7 +63,7 @@ resource "google_service_account_iam_binding" "admin-account-iam" {
6363
}
6464
```
6565

66-
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
66+
With IAM Conditions:
6767

6868
```hcl
6969
resource "google_service_account" "sa" {
@@ -112,7 +112,7 @@ resource "google_service_account_iam_member" "gce-default-account-iam" {
112112
}
113113
```
114114

115-
With IAM Conditions ([beta](https://terraform.io/docs/providers/google/provider_versions.html)):
115+
With IAM Conditions:
116116

117117
```hcl
118118
resource "google_service_account" "sa" {
@@ -155,7 +155,7 @@ The following arguments are supported:
155155
* `policy_data` - (Required only by `google_service_account_iam_policy`) The policy data generated by
156156
a `google_iam_policy` data source.
157157

158-
* `condition` - (Optional, [Beta](https://terraform.io/docs/providers/google/provider_versions.html)) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
158+
* `condition` - (Optional) An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding.
159159
Structure is documented below.
160160

161161
The `condition` block supports:

0 commit comments

Comments
 (0)