How to Manage Service Catalog deployments created by Consumers

[JohnDaniel]

Hi, for the context i'm planning to use service catalog as a self-serve portal for our devs to launch temporary VM on our GCP with terraform. But it seems that Catalog Admin currently don't have control for the private catalog deployments created by Catalog Consumer (as I can't find it in the doc / gcloud console) CMIIW.

So I'm thinking of another way, are any of the workarounds below possible to do?

1. Get notified when Service Catalog deployments created, so at least admin aware with the deployment
2. Automatically deprovision deployments after certain period of inactivity

Any other idea would be very appreciated, thank you!

[Willbin]

Hello @JohnDaniel,

Welcome to Google Cloud Community!

You may use this document to learn how to manage, update and delete solutions in the Service Catalog.

To manage service catalog resources, you must have a Catalog Admin role.
roles/cloudprivatecatalogproducer.admin

[JohnDaniel]

Hi @Willbin , I have read the documentation but it seems that Catalog Admin currently don't have control for the private catalog Deployments created by Catalog Consumer.

For example, as a Catalog Admin, i want to deprovision all deployments created with certain solution. Is it possible to achieve for now?

[Willbin]

Hello @JohnDaniel,

Yes, to deprovision a deployment:
1. Go to the Google Cloud console Service Catalog page.
2. Click Terraform deployments
3. find the deployment you want to deprovision.
4. Click more actions (displayed as three dots arranged vertically) menu then click Deprovision.

The deployment is deprovisioned.

[JohnDaniel]

Indeed, as a Catalog Consumer (users who deploy solution) I can do that, I can deprovision the deployments I created. 

But as a Catalog Admin, is it possible for me to deprovision all deployments created by consumers of my solution?

[Willbin]

Yes, you should be able to.

Catalog Consumer permissions were also included in the Catalog Admin role.
See Service Catalog IAM Roles for your reference. 

[sgirish]

Hi @Willbin , do we have API support to perform CRUD operations on catalog and solutions, so that we could automate the process of creating and updating catalogs. Ex: When a new cloud function is created, we add that to the existing catalog through the cloud build CI/CD process.

[sgirish]

Hi @Willbin , is there API support to perform CRUD operations on catalog and solution to automate the creation and updating of catalog through cloud build CI/CD process. For example: When a new cloud function is created, automatically adding that as link solution in the catalog through cloud build.