Skip to content

feat(cloudrun): implement service-to-service invocation and access#11

Closed
HomelessDinosaur wants to merge 1 commit intonitrictech:mainfrom
HomelessDinosaur:NIT-455
Closed

feat(cloudrun): implement service-to-service invocation and access#11
HomelessDinosaur wants to merge 1 commit intonitrictech:mainfrom
HomelessDinosaur:NIT-455

Conversation

@HomelessDinosaur
Copy link
Member

No description provided.

id = google_cloud_run_v2_service.service.name
domain_name = google_cloud_run_v2_service.service.uri
id = google_cloud_run_v2_service.service.name
domain_name = google_cloud_run_v2_service.service.uri
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should we be stripping the protocol here?

# Grant service-to-service invoker permissions
# Each service that needs to invoke this service gets the run.invoker role
resource "google_cloud_run_service_iam_member" "service_invokers" {
for_each = var.suga.services

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are we just naïvely doing all services can intercommunicate or only the ones that have explicitly requested it?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the latter for security reasons. Then add a way to toggle this in the UI/yaml

@HomelessDinosaur
Copy link
Member Author

Closing as not planned.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants