Add support for subnet IAM

[morgante]

Terraform Version

Terraform v0.11.5

Feature Request

I would like to be able to apply IAM policies to a subnet via Terraform. This is most useful for sharing only specific subnets into a service project in XPN.

Equivalent gcloud command: https://cloud.google.com/sdk/gcloud/reference/beta/compute/networks/subnets/set-iam-policy

This would ideally introduce 3 resources (like existing IAM resources):

• google_compute_subnetwork_iam_member to add a member to a role on the subnet
• google_compute_subnetwork_iam_binding to manage a role's members on a subnet
• google_compute_subnetwork_iam_policy to manage the entire subnet policy

References

• Allow google_compute_shared_vpc_service_project to share only specific subnetworks #1279

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 hashibot-feedback@hashicorp.com. Thanks!