Account Management Boundaries support

[nico2back27600]

Describe the bug
Monaco account command don't get boudaries

How to reproduce
$ monaco account download manifest.yaml

Expected behavior
Monaco need to drive policies, groups, users and boundaries

Log output
2024-11-15T10:02:55+01:00 info Monaco version 2.17.0
2024-11-15T10:02:55+01:00 info Loading manifest "manifest.yaml". Restrictions: groups=[], environments=[]
2024-11-15T10:02:55+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Starting download
2024-11-15T10:02:55+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Fetching environments
2024-11-15T10:02:57+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Fetched environments: ["one00000"]
2024-11-15T10:02:57+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Downloading policies
2024-11-15T10:03:01+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Downloaded 30 policies
2024-11-15T10:03:01+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Downloading groups
2024-11-15T10:03:10+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Downloaded 15 groups
2024-11-15T10:03:10+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Downloading users
2024-11-15T10:06:26+01:00 info [account=account_xxxxxxxxxxxxxxxxxxxxxxxxxxx] Fetched 1115 users
2024-11-15T10:06:26+01:00 info Downloaded account management resources written to 'download_account_20241115-100255'

Environment (please complete the following information):

• OS: Debian 12.6
• Tool version [2.17.0]

[arthurpitman]

Hi @nico2back27600, thank you for bringing this to our attention, we will investigate if this is something Monaco can support.

[Laubi]

Hi, this is not a bug but a new feature. We have it on our road map, but can't give an estimate yet when it will be available

[nico2back27600]

Hi, this is not a bug but a new feature. We have it on our road map, but can't give an estimate yet when it will be available

thank you!

[evaldasc]

Hi, this is not a bug but a new feature. We have it on our road map, but can't give an estimate yet when it will be available

I don't quite agree about it not being a bug: downloading boundaries themselves is certainly is a new feature, but policies applied with boundaries are now downloaded incorrectly. Consider a group which use read Logs policy with boundary allowing access only to specific bucket. When downloaded via Monaco it looks like policy allowing "Read Logs" across ALL buckets.

- id: xxx-limited-group
  name: xxx-limited-group
  account:
    policies:
    - AppEngine - User
    - Read Logs
    - Standard User
    - Storage All System Data Read