apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMPolicy
metadata:
  name: lighthouse-pubsub-publisher-iampolicy
spec:
  bindings:
  - members:
    - serviceAccount:lighthouse@${gcp_project_id}.iam.gserviceaccount.com
    role: roles/pubsub.publisher
  resourceRef:
    apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
    kind: PubSubTopic
    external: projects/${gcp_project_id}/topics/lighthouse