Granted and Google Cloud Platform (GCP)

[meyerjrr]

We have been working on expanding Granted’s functionality to work for multi-cloud. We see this as a logical next step to improve the work flow for users that have their domains expand across multi cloud providers. First up has been Google Cloud Platform (GCP).

Each cloud provider differs from one another, so we have been investigating how we can best support GCP in this coming update. We would also love to hear how you all use GCP in your day to day work!

As a start we have implemented context switching in the cli for changing the active project. And opening up into the console for a particular project. eg. assume and assume -c

We have used the gcloud config ~/.config/gcloud as a focus to begin with due to its similarity with AWS’s ~/.aws/config management of accounts and access.

Our GCP support introduces a few helpful commands that makes using Granted with GCP easer.

Firstly is the granted gcp generate command which will create configs for all projects you have access to. This is done through reading your access from .config/gcloud/credentials.db which is created after logging in with gcloud auth login

Once these configs are created Granted will list these config profiles when calling the assume command.

assume //returns aws and gcp profiles

assume --filter=gcp //filter just gcp profiles

//UX here is pending

Selecting one of these config profiles will export the following environment variables where applicable:

CLOUDSDK_ACTIVE_CONFIG_NAME

GOOGLE_CLOUD_PROJECT

CLOUDSDK_CORE_PROJECT

CLOUDSDK_CORE_ACCOUNT

CLOUDSDK_COMPUTE_REGION (If it is set in config)

REGION (If it is set in config)

ZONE (If it is set in config)

I’m opening this up for discussion for our users that use GCP, would this help your UX on working with GCP? If not, we would love to know:

• How do you interact and authenticate with GCP?
• What would make a you use Granted to interact with GCP?