postgres: lock down IAM access to single instance with IAM condition
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 20/100
Research direction
The payload names no files, tests, or CLI entry point. First clarify the intended change and where IAM conditions should be configured, then identify the relevant implementation and tests; done should include verified restriction of Cloud SQL IAM access to the single named instance.
Written by the indexing model from the issue text.
Description
It is possible to add IAM conditions to roles/cloudsql.client to lock down to a single instance like this resource.name == 'projects/abc123/instances/myinstance' && resource.type == 'sqladmin.googleapis.com/Instance'
- Dominant language
- Go
- Stars
- 2
- Forks
- 5
- Avg merge
- 2h 55m
- Merged PRs (30d)
- 30
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from nais/cli
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 56/100
Maintainers usually reply within 1 day
-
Difficulty 3/5 1-2 days Newbie friendliness 57/100
Maintainers usually reply within 1 day
-
mcp: mock schema is invalid GraphQL, so schema_* tests pass on a parse errorPossibly taken @Starefossen claimed this 1 day ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 35/100
Maintainers usually reply within 1 day
-
mcp: schema_list_queries returns an array as structuredContent, and its outputSchema is invalidPossibly taken @Starefossen claimed this 1 day ago. Open
Difficulty 3/5 1-2 days Newbie friendliness 68/100
Maintainers usually reply within 1 day
Similar issues
-
Type: Bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
projectdiscovery/notify#569 ·
-
internal
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
Results from sources can contain invalid host namesPossibly taken @Mzack9999 claimed this today. Open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
projectdiscovery/subfinder#1983 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
Maintainers usually reply within 1 day
-
bug triaged
Difficulty 2/5 1-3 hours Newbie friendliness 80/100
radius-project/radius#13566 · 2 comments ·
Maintainers usually reply within 1 day