1apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
2kind: PubSubTopic
3metadata:
4 name: promotions
5 annotations:
6 description: Used to promote artifacts to specific projects managed by us.
7---
8apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
9kind: PubSubSubscription
10metadata:
11 name: promotions
12spec:
13 ackDeadlineSeconds: 60
14 retainAckedMessages: false
15 retryPolicy:
16 maximumBackoff: 600s
17 minimumBackoff: 5s
18 topicRef:
19 name: promotions
20---
21apiVersion: iam.cnrm.cloud.google.com/v1beta1
22kind: IAMPolicyMember
23metadata:
24 name: registryforwarder-promotions-subscriber
25 annotations:
26 description: Allow platform-infra installation of forwarder subscribe to the promotions topic.
27spec:
28 member: serviceAccount:fwder-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
29 resourceRef:
30 name: promotions
31 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
32 kind: PubSubSubscription
33 role: roles/pubsub.subscriber
34---
35apiVersion: iam.cnrm.cloud.google.com/v1beta1
36kind: IAMPolicyMember
37metadata:
38 name: registryforwarder-promotions-viewer
39spec:
40 member: serviceAccount:fwder-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
41 resourceRef:
42 name: promotions
43 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
44 kind: PubSubSubscription
45 role: roles/pubsub.viewer
View as plain text