Skip to content

Commit

Permalink
Updates
Browse files Browse the repository at this point in the history
  • Loading branch information
rajlearner17 committed Jan 28, 2025
1 parent 76f7938 commit 73e067d
Show file tree
Hide file tree
Showing 2 changed files with 19 additions and 11 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,12 @@ Importing a [GCP Organization](https://cloud.google.com/resource-manager/docs/cl

## Prerequisites

- Guardrails: Access to the Guardrails console with *Turbot/Owner* or *Turbot/Admin* permissions at the Turbot resource level. [GCP mod](https://hub.guardrails.turbot.com/mods/gcp/mods/gcp) 5.30+ installed in your Guardrails workspace.
- Access to the Guardrails console with *Turbot/Owner* or *Turbot/Admin* permissions at the Turbot resource level.
- Minimum Turbot Enterprise (TE) version `v5.48.0` or later.
- [GCP mod](https://hub.guardrails.turbot.com/mods/gcp/mods/gcp) `5.30+` installed in your Guardrails workspace.
- GCP Console: Familiarity with the GCP Console, including admin privileges.
- Tools: The `gcloud` CLI configured on your local environment.
- Enterprise Hosting: A minimum [TED](/guardrails/docs/reference/glossary#turbot-guardrails-enterprise-database-ted) version of `1.46.x` or later.
- The `gcloud` CLI configured on your local environment.
- [TED](/guardrails/docs/reference/glossary#turbot-guardrails-enterprise-database-ted) version of `1.46.x` or later updated.

### Supported Authentication

Expand All @@ -46,11 +48,6 @@ Refer to the image below as example using as example in GCP `Console`.

To import an organization into Guardrails, create the service account in any single project under your organization. [Prepare a GCP Project for Import to Guardrails](/guardrails/docs/getting-started/getting-started-gcp/prepare-project#step-1-locate-iam--admin--service-accounts). The step `Locate IAM & Admin > Service Accounts` elaborates the steps to create service account.

<!-- > [!NOTE]
> To import an organization, you need only `Organization Viewer`, `Project Viewer`, and `Folder Viewer` roles to allow the discovery of all resources under the organization.
> If Guardrails attempts an action (e.g., enabling APIs, modifying resources) without sufficient permissions, you will encounter `access denied` errors. To resolve this, ensure the required permissions are granted or update the Guardrails policies to align with your organization's requirements. -->

## Step 3: Grant IAM Roles

> [!TIP]
Expand Down Expand Up @@ -80,6 +77,9 @@ Refer to the image below:

![Service Account with Organization Scope](/images/docs/guardrails/guides/gcp/import-gcp-organization/enterprise-hosted-workspace/service-account-with-org-scope.png)

> [!NOTE]
> To import an organization, you need only `Organization Viewer`, `Project Viewer`, and `Folder Viewer` roles to allow the discovery of all resources under the organization.
Alternatively you can grant roles using command line interface as below.

*CLI Reference:* Create a service account and assign organization-Level roles.
Expand Down Expand Up @@ -206,7 +206,7 @@ Log in to the GCP console and navigate to the project where the configured servi
![Create GCP Label](/images/docs/guardrails/guides/gcp/import-gcp-organization/enterprise-hosted-workspace/gcp-label-creation.png)
> [!WARNING]
> The `External ID` label created for this organization import, must be retained within the respective GCP project.
> The `External ID` label created for this organization import must be retained within the respective GCP project to prevent errors in Guardrails.
## Step 9: Exclude Projects
Expand Down Expand Up @@ -249,6 +249,11 @@ Navigate to the **Resources** tab, search for the organization name to check the
![Review GCP Org Resources](/images/docs/guardrails/guides/gcp/import-gcp-organization/enterprise-hosted-workspace/review-gcp-org-resources-imported.png)
## Next Steps
- Learn how to [Enable GCP Services in Guardrail](guides/gcp/services#enabling-gcp-services-in-guardrails).
- Learn how to [Configure Real-Time Event Handlers](guides/gcp/real-time-events).
## Troubleshooting
| **Issue** | **Description** | **Guide** |
Expand Down
7 changes: 5 additions & 2 deletions docs/guides/gcp/import-gcp-project/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -278,13 +278,16 @@ for more information regarding the billing API.
## Importing a GCP Project via the Guardrails Console

1. Login to your Guardrails workspace as a **Turbot/Owner** or **Turbot/Admin**.
2. Click the purple **CONNECT** card in the top right of the landing page.
3. Click **GCP**.
2. Select the **CONNECT** card in the top right of the landing page.
3. Select **GCP**.
3. Select **GCP Project**.
4. Select the `Import location` (the imported project will be a child of this
resource).
5. Select the `Access mode` as `Upload a credential file`.
6. Drop the JSON file saved in the above step into the account import screen.



![Import GCP Project](/images/docs/guardrails/guides/gcp/import-gcp-project/import-gcp-project.png)

7. Select **Connect** to start Guardrails discovery. You will be redirected to an
Expand Down

0 comments on commit 73e067d

Please sign in to comment.