Skip to content

Conversation

@Chaffelson
Copy link
Contributor

Add options to control whether Ansible will manage GCP identities, roles, services, and policies for the user. These commands fail if the user does not have permission to change that setting, whether already enabled/created or not, and typically BYOI will already have these created by a Cloud Admin team.

Added env.gcp.manage_identities to control deploy and teardown of GCP credentials, identities and roles. Defaults to True to match existing behavior.
Added env.gcp.auto_enable_services to control enabling of required GCP services for CDP. Defaults to True to match existing behavior

Signed-off-by: Daniel Chaffelson [email protected]

@Chaffelson Chaffelson requested a review from a team October 7, 2022 10:42
…les, services, and policies for the user. These commands fail if the user does not have permission to change that setting, whether already enabled/created or not

Added env.gcp.manage_identities to control deploy and teardown of GCP credentials, identities and roles. Defaults to True to match existing behavior
Added env.gcp.auto_enable_services to control enabling of required GCP services for CDP. Defaults to True to match existing behavior

Signed-off-by: Daniel Chaffelson <[email protected]>
@Chaffelson Chaffelson force-pushed the gcp_skip_identities branch from 4bdabc1 to bff64c8 Compare October 7, 2022 10:46
Copy link
Contributor

@jimright jimright left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@Chaffelson - Apart from the leftover pause mentioned in my comment above, this looks good. Happy to approve once that is removed.

Testing steps:

  • Confirmed that the existing behaviour is maintained when these options are not specified;
  • Confirmed that auto_enable_services skips/executes the required code blocks as expected (not able to test service enablement as all services were already enabled)
  • Confirmed that manage_identities skips/executes the required code blocks as expected.

Removed leftover pause from debugging

Signed-off-by: Daniel Chaffelson <[email protected]>
Copy link
Contributor

@jimright jimright left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good. Approved.

@jimright jimright merged commit d8895b6 into cloudera-labs:devel Oct 19, 2022
chusopr pushed a commit to bluemetrix-com/cloudera.exe that referenced this pull request Dec 5, 2022
* Add options to control whether Ansible will manage GCP identities, roles, services, and policies for the user. These commands fail if the user does not have permission to change that setting, whether already enabled/created or not
Added env.gcp.manage_identities to control deploy and teardown of GCP credentials, identities and roles. Defaults to True to match existing behavior
Added env.gcp.auto_enable_services to control enabling of required GCP services for CDP. Defaults to True to match existing behavior
* Update setup_gcp_authz.yml
* Removed leftover pause from debugging

Signed-off-by: Daniel Chaffelson <[email protected]>
@wmudge wmudge added the enhancement MINOR - New feature or enhancement in the CHANGELOG label Jul 15, 2025
wmudge added a commit to wmudge/cloudera.exe that referenced this pull request Aug 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement MINOR - New feature or enhancement in the CHANGELOG

Development

Successfully merging this pull request may close these issues.

3 participants