Skip to content

tests: validate that plan work with ReadOnly permissions #1985

Open
@Codelax

Description

@Codelax

Given an APIKey with AllProductsReadOnly as only permission set.

It would be expected that all resources' state can be read using this API key.
This would allow to do terraform plan with this key in a CI or fetch the current state.

As an example, k8s_cluster require more permissions as it tries to fetch kubeconfig on each Read

How can this be achieved ?
We can update simple tests to include a PlanOnly step. This step should be executed using a ReadOnly key.

Metadata

Metadata

Assignees

Labels

bugenhancementiamIAM issues, bugs and feature requestspriority:mediumImprovements that are not the main prioritytests

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions