diff --git a/main.tf b/main.tf index 59b2f5c..416d27e 100644 --- a/main.tf +++ b/main.tf @@ -99,6 +99,8 @@ locals { "compute.instances.updateAccessConfig", "compute.instances.updateNetworkInterface", "compute.instances.use", + "compute.interconnectAttachments.get", + "compute.machineTypes.get", "compute.machineTypes.list", "compute.networkEndpointGroups.attachNetworkEndpoints", "compute.networks.access", @@ -110,12 +112,15 @@ locals { "compute.networks.updatePolicy", "compute.networks.use", "compute.networks.useExternalIp", + "compute.projects.get", "compute.regionBackendServices.create", "compute.regionBackendServices.delete", "compute.regionBackendServices.get", "compute.regionBackendServices.list", "compute.regionBackendServices.use", "compute.regionOperations.get", + "compute.regions.get", + "compute.routers.get", "compute.routes.create", "compute.routes.delete", "compute.routes.get", diff --git a/test/profiles/f5-xc-role/controls/role.rb b/test/profiles/f5-xc-role/controls/role.rb index 07ef28a..9b58ce0 100644 --- a/test/profiles/f5-xc-role/controls/role.rb +++ b/test/profiles/f5-xc-role/controls/role.rb @@ -75,6 +75,8 @@ 'compute.instances.updateAccessConfig', 'compute.instances.updateNetworkInterface', 'compute.instances.use', + 'compute.interconnectAttachments.get', + 'compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networkEndpointGroups.attachNetworkEndpoints', 'compute.networks.access', @@ -86,12 +88,15 @@ 'compute.networks.updatePolicy', 'compute.networks.use', 'compute.networks.useExternalIp', + 'compute.projects.get', 'compute.regionBackendServices.create', 'compute.regionBackendServices.delete', 'compute.regionBackendServices.get', 'compute.regionBackendServices.list', 'compute.regionBackendServices.use', 'compute.regionOperations.get', + 'compute.regions.get', + 'compute.routers.get', 'compute.routes.create', 'compute.routes.delete', 'compute.routes.get', @@ -109,7 +114,7 @@ 'iam.serviceAccounts.get', 'iam.serviceAccounts.list', 'resourcemanager.projects.get' -].freeze +].sort!.freeze EXPECTED_ORG_PERMISSIONS = [ 'compute.addresses.create', @@ -186,6 +191,8 @@ 'compute.instances.updateAccessConfig', 'compute.instances.updateNetworkInterface', 'compute.instances.use', + 'compute.interconnectAttachments.get', + 'compute.machineTypes.get', 'compute.machineTypes.list', 'compute.networkEndpointGroups.attachNetworkEndpoints', 'compute.networks.access', @@ -197,12 +204,15 @@ 'compute.networks.updatePolicy', 'compute.networks.use', 'compute.networks.useExternalIp', + 'compute.projects.get', 'compute.regionBackendServices.create', 'compute.regionBackendServices.delete', 'compute.regionBackendServices.get', 'compute.regionBackendServices.list', 'compute.regionBackendServices.use', 'compute.regionOperations.get', + 'compute.regions.get', + 'compute.routers.get', 'compute.routes.create', 'compute.routes.delete', 'compute.routes.get', @@ -221,7 +231,7 @@ 'iam.serviceAccounts.list', 'resourcemanager.projects.get', 'resourcemanager.projects.list' -].freeze +].sort!.freeze control 'project_role' do title 'Verify F5 Distributed Cloud custom role with project scope'