Skip to content

[DOCS] partner guide: pass grant_write_access to verify/ while the write window is open #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
haimbj1 merged 2 commits into from
Oct 6, 2026
Merged

[DOCS] partner guide: pass grant_write_access to verify/ while the write window is open #16

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b6a8f76
[DOCS] partner guide: pass grant_write_access to verify/ while the wr…
haimbj1 Oct 6, 2026
ca53c72
[DOCS] partner guide: drop the redundant verify/ note
haimbj1 Oct 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions PARTNER_GUIDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -514,8 +514,9 @@ the output.
Use this section when a release arrives between [step 8](#8-grant-write-access) and
[step 11](#11-revoke-write-access). Your write access is granted, and the ceremony has not
run yet. The steps are the same as in [Apply a later release](#apply-a-later-release), with
one difference: `plan` and `apply` keep `-var grant_write_access=true`. Without it, the
apply removes your two write bindings, and the keygen cannot write your share.
one difference: `plan`, `apply` and `verify/` keep `-var grant_write_access=true`.
Without it, the apply removes your two write bindings, and the keygen cannot write your
share.

```bash
# Your GCP project ID, the same one you used in onboarding. Not the project number.
Expand All @@ -539,7 +540,8 @@ terraform apply -var-file=../values.tfvars -var partner_project_id=$PROJECT \

terraform -chdir=verify init -backend=false -input=false
terraform -chdir=verify plan -input=false \
-var-file=../../values.tfvars -var partner_project_id=$PROJECT
-var-file=../../values.tfvars -var partner_project_id=$PROJECT \
-var grant_write_access=true
```

**What to expect.** The per-pin table in
Expand Down
Loading