apiVersion: backend.edge.ncr.com/v1alpha2 kind: DatabaseUser metadata: name: kinform-psqlinjector spec: type: CLOUD_IAM_SERVICE_ACCOUNT serviceAccount: emailRef: kinform-psqlinjector@${foreman_gcp_project_id}.iam.gserviceaccount.com iamUsername: kinform-psqlinjector@${foreman_gcp_project_id}.iam force: true grants: - schema: public tableGrant: - permissions: - permission: SELECT table: banners - permissions: - permission: SELECT - permission: TRIGGER - permission: UPDATE table: clusters - permissions: - permission: INSERT table: cluster_events - permissions: - permission: DELETE - permission: INSERT - permission: SELECT - permission: UPDATE table: watched_field_objects - permissions: - permission: DELETE - permission: INSERT - permission: SELECT - permission: UPDATE table: watched_field_values instanceRef: name: ${edge_sql_db_name}-migrated projectID: ${foreman_gcp_project_id} prune: true