1apiVersion: iam.cnrm.cloud.google.com/v1beta1 2kind: IAMPolicyMember 3metadata: 4 name: grafana-sa-k8s-monitoring-viewer 5spec: 6 member: serviceAccount:grafana-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com 7 resourceRef: 8 apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1 9 kind: Project 10 external: projects/${gcp_project_id} 11 role: roles/monitoring.viewer