1apiVersion: backend.edge.ncr.com/v1alpha2
2kind: DatabaseUser
3metadata:
4 name: kinform-psqlinjector
5spec:
6 type: CLOUD_IAM_SERVICE_ACCOUNT
7 serviceAccount:
8 emailRef: kinform-psqlinjector@${foreman_gcp_project_id}.iam.gserviceaccount.com
9 iamUsername: kinform-psqlinjector@${foreman_gcp_project_id}.iam
10 force: true
11 grants:
12 - schema: public
13 tableGrant:
14 - permissions:
15 - permission: SELECT
16 table: banners
17 - permissions:
18 - permission: SELECT
19 - permission: TRIGGER
20 - permission: UPDATE
21 table: clusters
22 - permissions:
23 - permission: INSERT
24 table: cluster_events
25 - permissions:
26 - permission: DELETE
27 - permission: INSERT
28 - permission: SELECT
29 - permission: UPDATE
30 table: watched_field_objects
31 - permissions:
32 - permission: DELETE
33 - permission: INSERT
34 - permission: SELECT
35 - permission: UPDATE
36 table: watched_field_values
37 instanceRef:
38 name: ${edge_sql_db_name}-migrated
39 projectID: ${foreman_gcp_project_id}
40 prune: true
View as plain text