IssueTracker

This will create a feature request which anybody can view and comment on.

Please describe your requested enhancement. Good feature requests will solve common problems or enable new use cases.

What you would like to accomplish:

I would like to leverage Regular Expression matching on resource.name attributes when defining IAM Conditional policies in Google Cloud Platform.

IAM Conditional policies use the CEL language to defined their underlying expressions. The CEL language specification lists support for Re2 regular expressions via the language implemented matches function / operator.

How this might work:

Assuming IAM Conditional policies would support the CEL language matches function:

matches(resource.name, "^projects/[a-z-]+/regions/[a-z-]+/operations/operations-[a-z-]+")

Assuming IAM Conditions policies would support the CEL language matches operator:

resource.name.matches("^projects/[a-z-]+/regions/[a-z-]+/operations/operations-[a-z-]+")

Both above statements would evaluate to true when the resource name matches the provided regular expression.

Other information (workarounds you have tried, documentation consulted, etc):

A workaround to the matches function / operator not being supported is to make use of the startsWith and endsWith functions, omitting the variable portion of the resource.name. However, this is very limited in functionality and requires that the string starts and ends with a static value. Example:

resource.name.startsWith("projects/example-project/regions/") && resource.name.endsWith("operations")