apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata: name: kinform-psqlinjector labels: platform.edge.ncr.com/component: kinform-psqlinjector spec: displayName: kinform-psqlinjector resourceID: kinform-psqlinjector --- apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata: name: kinform-psqlinjector-pubsub-subscriber-tenants spec: member: serviceAccount:kinform-psqlinjector@${foreman_gcp_project_id}.iam.gserviceaccount.com resourceRef: apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1 kind: Folder external: ${tenants_gcp_folder_id} role: roles/pubsub.subscriber --- apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata: name: kinform-psqlinjector-pubsub-viewer-tenants spec: member: serviceAccount:kinform-psqlinjector@${foreman_gcp_project_id}.iam.gserviceaccount.com resourceRef: apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1 kind: Folder external: ${tenants_gcp_folder_id} role: roles/pubsub.viewer