...

Text file src/edge-infra.dev/config/pallets/o11y/fluentbit/base/gcpinfra/manifests.yaml

Documentation: edge-infra.dev/config/pallets/o11y/fluentbit/base/gcpinfra

     1# allow a cluster to write logs to its banner project(gcp_project_id)
     2apiVersion: iam.cnrm.cloud.google.com/v1beta1
     3kind: IAMPolicyMember
     4metadata:
     5  name: fluentbit-sa-k8s-logs-writer-banner
     6spec:
     7  member: serviceAccount:o11y-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
     8  resourceRef:
     9    apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
    10    kind: Project
    11    external: projects/${gcp_project_id}
    12  role: roles/logging.logWriter

View as plain text