apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata: name: cctl-gke-admin labels: platform.edge.ncr.com/component: clusterctl spec: member: serviceAccount:cctl-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com resourceRef: apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1 kind: Folder external: ${env_folder_id} role: roles/container.admin