apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicy metadata: name: lighthouse-pubsub-publisher-iampolicy spec: bindings: - members: - serviceAccount:lighthouse@${gcp_project_id}.iam.gserviceaccount.com role: roles/pubsub.publisher resourceRef: apiVersion: pubsub.cnrm.cloud.google.com/v1beta1 kind: PubSubTopic external: projects/${gcp_project_id}/topics/lighthouse