我正在努力學習更多 Go，我的第一個計劃是列出我們 GCP 組織中的所有項目（API 相當于gcloud projects list）。稍后我想以此為跳板，在更新 Compute Engine 標簽時創建機器映像。我正在使用 Google API 文檔中的這個樣板：“ListProjects 列出了指定文件夾或組織資源的直接子項目。”package mainimport ( resourcemanager "cloud.google.com/go/resourcemanager/apiv3" "context" "google.golang.org/api/iterator" resourcemanagerpb "google.golang.org/genproto/googleapis/cloud/resourcemanager/v3")func main() { ctx := context.Background() c, err := resourcemanager.NewProjectsClient(ctx) if err != nil { // TODO: Handle error. } defer c.Close() req := &resourcemanagerpb.ListProjectsRequest{ // TODO: Fill request struct fields. // See https://pkg.go.dev/google.golang.org/genproto/googleapis/cloud/resourcemanager/v3#ListProjectsRequest. } it := c.ListProjects(ctx, req) for { resp, err := it.Next() if err == iterator.Done { break } if err != nil { // TODO: Handle error. } // TODO: Use resp. _ = resp }}我意識到這里有我沒有完成的“TODO”部分。有人可以幫助建議我如何使用這個樣板并獲得一個簡單的項目列表嗎？感覺我缺少某種形式來識別我的組織或項目，但由于我想要整個項目列表，似乎我沒有在 API 調用中傳達我的組織 ID？現在我收到“PermissionDenied desc = The caller does not have permission”。但是，我知道我有 Google Application Default 憑據設置，因為我可以在 go 中執行另一個 API 調用以列出計算實例。
1 回答
縹緲止盈
TA貢獻2041條經驗 獲得超4個贊
將APIs Explorer用于 Cloud Resource Manager API v3projects.search
ORGANIZATION=[[YOUR-ORG]]
PROJECT=[[YOUR-PROJECT]] # Service Accounts are owned by Projects
ACCOUNT="tester"
# Enable Cloud Resource Manager API in a Project
# This Project will own the Service Account too
gcloud services enable cloudresourcemanager.googleapis.com \
--project=${PROJECT}
# Create the Service Account
gcloud iam service-accounts create ${ACCOUNT} \
--project=${PROJECT}
EMAIL=${ACCOUNT}@${PROJECT}.iam.gserviceaccount.com
# Create a Service Account Key locally
# For testing purposes only
gcloud iam service-accounts keys create ${PWD}/${ACCOUNT}.json \
--iam-account=${EMAIL} \
--project=${PROJECT}
# Ensure the Service Account can browse the Organization's resources
gcloud organizations add-iam-policy-binding ${ORGANIZATION} \
--role=roles/browser \
--member=serviceAccount:${EMAIL}
export GOOGLE_APPLICATION_CREDENTIALS=${PWD}/${ACCOUNT}.json
export ORGANIZATION
go run .
并且： main.go：
package main
import (
"context"
"fmt"
"log"
"os"
resourcemanager "cloud.google.com/go/resourcemanager/apiv3"
resourcemanagerpb "google.golang.org/genproto/googleapis/cloud/resourcemanager/v3"
"google.golang.org/api/iterator"
)
func main() {
organization := os.Getenv("ORGANIZATION")
if organization == "" {
log.Fatalf("unable to obtain ORGANIZATION from the environment")
}
ctx := context.Background()
c, err := resourcemanager.NewProjectsClient(ctx)
if err != nil {
log.Fatal(err)
}
defer c.Close()
rqst := &resourcemanagerpb.SearchProjectsRequest{
Query: fmt.Sprintf("parent:organizations/%s", organization),
}
it := c.SearchProjects(ctx, rqst)
for {
resp, err := it.Next()
if err == iterator.Done {
break
}
if err != nil {
log.Fatal(err)
}
log.Println(resp.DisplayName)
}
}
- 1 回答
- 0 關注
- 115 瀏覽
添加回答
舉報
0/150
提交
取消