permission-discrepancy-finder doesn't work due to google-cloud-asset bad version

[radkomateusz]

Hi Googlers ;)

It seems that permission-discrepancy-finder doesn't work due to using bad version of google-cloud-asset library.

requirements.txt says:

google-api-python-client
google-cloud-asset

which downloads newest version of google-cloud-asset -> 2.1.0

Unfortunately, during running script, I get:
WARNING[2020-10-14 09:46:39,552]:Cannot retrive data for project: xxxx because of error analyze_iam_policy() got an unexpected keyword argument 'analysis_query'.

Changing requirements to:

google-api-python-client
google-cloud-asset==1.3.0

solves that issue.

Please update requirements.txt file or adjust script to newest version.

Note that this script is mentioned multiple times in documentation as solution for finding affected users of recent changes with default compute/app engine service accounts, so would be nice if it works without debugging.

Best regards
Mateusz :)

[agold-rh]

@misabhishek Do you have any input, or should this be closed?