Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(storage): support PublicAccessPrevention #3608

Merged
merged 13 commits into from Jun 28, 2021

Conversation

tritone
Copy link
Contributor

@tritone tritone commented Jan 25, 2021

This is a new field in the IAM configuration for buckets.
Support viewing/setting via bucket attrs, and add an integration
test for the feature.

Closes #3203

This is a new field in the IAM configuration for buckets.
Support viewing/setting via bucket attrs, and add an integration
test for the feature.

Closes googleapis#3203
@tritone tritone requested a review from a team as a code owner January 25, 2021 19:12
@product-auto-label product-auto-label bot added the api: storage Issues related to the Cloud Storage API. label Jan 25, 2021
@google-cla google-cla bot added the cla: yes This human has signed the Contributor License Agreement. label Jan 25, 2021
Copy link
Contributor

@shaffeeullah shaffeeullah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for implementing this, Chris!!

// enforces Public Access Prevention on the bucket.
PublicAccessPreventionEnforced

publicAccessPreventionDefault string = ""
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the naming of this field might be confusing. Public Access Prevention defaults to 'unspecified'. It will never hold a blank value. I'm trying to think of another option.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agreed on this one-- I was trying to follow https://google.aip.dev/126 but it suggests "unspecified" for a zero value. 😆 Suggestions welcome!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Went for "unknown" here instead.

storage/bucket_test.go Show resolved Hide resolved
storage/bucket_test.go Show resolved Hide resolved
tritone added a commit to tritone/golang-samples that referenced this pull request Jan 26, 2021
Adds samples for 3 new region tags for PublicAccessPrevention
feature. See library PR at googleapis/google-cloud-go#3608
@frankyn frankyn added the do not merge Indicates a pull request not ready for merge, due to either quality or timing. label Jan 27, 2021
@tritone tritone added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Jan 29, 2021
@kokoro-team kokoro-team removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Jan 29, 2021
@tritone tritone requested a review from a team March 22, 2021 16:58
Copy link
Member

@codyoss codyoss left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@shaffeeullah
Copy link
Contributor

@tritone ,

We would like to merge and release this feature next Monday (06/14/21). Does that work for you?

@shaffeeullah
Copy link
Contributor

Public access prevention rollout has been delayed due to a bug surfaced during Googler preview. I will keep this PR updated as I learn new release timeline details.

@shaffeeullah
Copy link
Contributor

@tritone This feature can now be merged and released.

@tritone tritone removed the do not merge Indicates a pull request not ready for merge, due to either quality or timing. label Jun 28, 2021
@tritone tritone merged commit 99bc782 into googleapis:master Jun 28, 2021
@tritone tritone deleted the bucket-pap branch June 28, 2021 18:37
codyoss pushed a commit to GoogleCloudPlatform/golang-samples that referenced this pull request Jun 30, 2021
Adds samples for 3 new region tags for PublicAccessPrevention
feature. See library PR at googleapis/google-cloud-go#3608
Cori1109 added a commit to Cori1109/golang-samples that referenced this pull request Jan 9, 2023
Adds samples for 3 new region tags for PublicAccessPrevention
feature. See library PR at googleapis/google-cloud-go#3608
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api: storage Issues related to the Cloud Storage API. cla: yes This human has signed the Contributor License Agreement.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

storage: add support for PublicAccessPrevention
5 participants