IssueTracker

Currently, CAI exports contain compute instances that are otherwise hidden from customers.  In particular: AppEngine Flex instances are not visible to customers through the compute engine API.  But they are exported as Compute Engine Instances in CAI exports.

For a detailed example of this issue, refer to GCP support case 21447587.  That case contains contains confidential details so I cannot reproduce it here.


What you would like to accomplish:
CAI exports should not contain resources that customers cannot see through the API.

How this might work:
I suspect CAI is using a Google-specific view which includes hidden resources.  CAI exports should always use customer-facing APIs to ensure that non-public resources are not exported.

If applicable, reasons why alternative solutions are not sufficient:
Support claims that the current behavior is working by design.  But CAI is exporting resources that do not exist according to the customer view.  So the existing design isn't sufficient.