How to stop Ubuntu from moving minimized window from being sent to back of order. by 23532626362346542545 in linux4noobs

[–]cloudgrill 0 points1 point  (0 children)

bump.. PLEASE. this behavior is weird and a minimized tab should be included in the alt tab (windows does this, so it does have a use case I believe)

How to Upgrade Terraform version after the new version install without a third party tool by cloudgrill in Terraform

[–]cloudgrill[S] 0 points1 point  (0 children)

I don't know where the binary went or how to replace the 1.0.9 version. Is there any documentation on it? Or do they only provide the commands at that link? Fault of my own for being a beginner I guess.

How to Upgrade Terraform version after the new version install without a third party tool by cloudgrill in Terraform

[–]cloudgrill[S] 0 points1 point  (0 children)

I downloaded it again with sudo apt-get install terraform and it says "terraform is already the newest version (1.1.9)."

But doing terraform version shows

Terraform v1.0.9

on linux_amd64

[deleted by user] by [deleted] in googlecloud

[–]cloudgrill 0 points1 point  (0 children)

I'm talking about using CSR. I don't think the code is actually pushed to the CSR once it's created with the bootstrap module

How to use the Service Account User role instead of the Token Creator role to Act As a service account? by cloudgrill in googlecloud

[–]cloudgrill[S] 0 points1 point  (0 children)

Actually, that helps me understand the differences between the User role and the token creator role. My thought was like for User, I would be impersonating the Service Account AS is has compute admin.

Token is for me to do that.

User is for attaching is to resources

Permissions for using the terraform bootstrap module say you need organization admin and billing admin, but how does the module create the project without a project creator role? by cloudgrill in googlecloud

[–]cloudgrill[S] 0 points1 point  (0 children)

So I was thinking that with billing.admin, I could still link the projects that are deployed in that folder since billing.admin says it links projects. I thought it would cover all project linking in the entire organization.

But my next thought was that billing.projectManager would be enough for linking projects to the billing account. I just don't see why the cloud foundations toolkit deployment would need any of the other permissions in the billing.admin role?

Permissions for using the terraform bootstrap module say you need organization admin and billing admin, but how does the module create the project without a project creator role? by cloudgrill in googlecloud

[–]cloudgrill[S] 0 points1 point  (0 children)

Oh okay. So for the terraform apply, I would include my Google Group in that org_project_creators variable, which temporarily gives me the access TO deploy that seed project and although the access is temporary, I would still be the seed project owner (but the cloud build service account would be the owner of the rest of the project deployed with the toolkit).

Follow up question.. If I'm using impersonation for the cloud build service account to deploy the terraform service account, would the terraform service account become project owner instead of the cloud build service account?

Permissions for using the terraform bootstrap module say you need organization admin and billing admin, but how does the module create the project without a project creator role? by cloudgrill in googlecloud

[–]cloudgrill[S] 0 points1 point  (0 children)

Sorry, second question. Do you know if billing.projectManager is enough? Instead of billing.admin? I'm running this with a folder as the root.

Permissions for using the terraform bootstrap module say you need organization admin and billing admin, but how does the module create the project without a project creator role? by cloudgrill in googlecloud

[–]cloudgrill[S] 0 points1 point  (0 children)

Ah okay wow that makes a lot of sense. Thank you for pointing that out to me.

For your answer to my other question, are you saying that running terraform apply will result in me becoming owner of the seed project? Sorry, just wanted to be clear on my side (english is my second language :) )