1apiVersion: iam.cnrm.cloud.google.com/v1beta1 2kind: IAMPolicyMember 3metadata: 4 name: ncr-charts-oci-reader 5spec: 6 member: serviceAccount:flux-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com 7 resourceRef: 8 apiVersion: artifactregistry.cnrm.cloud.google.com/v1beta1 9 kind: ArtifactRegistryRepository 10 external: projects/${foreman_gcp_project_id}/locations/${gcp_region}/repositories/ncr-charts 11 role: roles/artifactregistry.reader