Get notification on all Owner accounts while project deletion [195669454]

Assigned

Feature Request

Status Update

No update yet.

Description

di...@google.com

created issue #1

Aug 5, 2021 06:50PM

Issue summary: As per the current notification strategy[1], there is an intended behavior that while shutting(deleting) down a project, a notification email will be send only to the user who initiated the delete operation and the Technical category contacts that are listed in Essential Contacts.

However, if there are no technical category contacts listed in Essential Contacts, the notification will only send to those user account(owner) who initiated the project deletion. The other project Owners will not get any notification.

Customer is requesting for a feature request so that when a project deletion happens, all the listed project owners should get the notification.

[1]

https://cloud.google.com/resource-manager/docs/creating-managing-projects#:~:text=a%20notification%20email%20will%20be%20sent%20to%20the%20user%20who%20initiated%20the%20delete%20operation%20and%20the%20technical%20category%20contacts%20that%20are%20listed%20in%20essential%20contacts.%20

Comments

di...@google.com <di...@google.com> Aug 5, 2021 06:51PM

Assigned to gc...@google.com.

al...@google.com <al...@google.com> #2Aug 9, 2021 03:21PM

Hello,

Thank you for opening this feature request.

I have forwarded your request to our Product team for further review and evaluation. At this time, I'm unable to provide you with an ETA or guarantee that this feature will be deployed. Nevertheless, rest assured that your feedback is always taken seriously.

Any future updates will be posted on this thread. Once again let me thank you for helping us to improve the functionality of our products.

ms...@nvidia.com <ms...@nvidia.com> #3Aug 10, 2021 08:58PM

Thank you! Really looking forward to their input.

From my perspective, the core of this issue revolves around two major areas:

- Business continuity: since key stakeholders may be unaware their project get shutdown absent them being added to the Essential Contacts API, this could cause a major loss in revenue and cause business disruption. It should be the case that Essential Contacts "Fallback Contacts" are defaulted to "owners" for this particular action (account deletion)

- Security: If an account with a role allowing it to delete projects gets compromised, this could exacerbate the BC/DR issue raised above, in addition to being a security risk should there be any sensitive workloads, data, etc.

If it helps, I am more than happy to jump on a call with the engineering team to talk this over in more detail and provide some more solid use cases.

Thanks!

ri...@google.com <ri...@google.com> #4Sep 28, 2021 06:07AM

Hi,

I wanted to know about this feature request in detail. Our GCP project shares access with a third party team, and one of their members deleted the project. We were able to recover it, as we were fortunate enough to find about it quite early. As a safety measure, we also want to set this up for our GCP Project, hence, wanted to know about the expected feature in detail. It'll be great if one can elaborate their approach on something similar used to serve a similar use case as well.

Regards

Rizwan

ch...@google.com <ch...@google.com> May 5, 2023 01:55PM

Reassigned to ch...@google.com.

ch...@google.com <ch...@google.com> Jun 23, 2023 09:53AM

Reassigned to gc...@google.com.

Issue 195669454