1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPartialPolicy
3metadata:
4 name: dsp-partial-policy
5spec:
6 bindings:
7 - members:
8 - member: serviceAccount:service-${gcp_project_number}@gcp-sa-monitoring-notification.iam.gserviceaccount.com
9 role: roles/pubsub.publisher
10 resourceRef:
11 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
12 kind: PubSubTopic
13 external: projects/${gcp_project_id}/topics/dsp-notifications
14---
15apiVersion: monitoring.cnrm.cloud.google.com/v1beta1
16kind: MonitoringNotificationChannel
17metadata:
18 name: dsp-pubsub-notification-channel
19spec:
20 type: pubsub
21 labels:
22 topic: projects/${gcp_project_id}/topics/dsp-notifications
23 description: PubSub topic for sending events to DSP for processing.
24 enabled: true
25 forceDelete: true
26---
27apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
28kind: PubSubSubscription
29metadata:
30 name: dsp-notifications-subscription
31spec:
32 ackDeadlineSeconds: 600
33 messageRetentionDuration: 604800s
34 retainAckedMessages: false
35 topicRef:
36 name: dsp-notifications
37---
38apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
39kind: PubSubTopic
40metadata:
41 name: dsp-notifications
42---
43apiVersion: iam.cnrm.cloud.google.com/v1beta1
44kind: IAMPartialPolicy
45metadata:
46 name: dsp-users-pubsub-access
47spec:
48 bindings:
49 - members:
50 - member: user:fh185040@ncr.com
51 - member: user:ak185158@ncr.com
52 - member: user:ag185392@ncr.com
53 - member: user:rs185722@ncr.com
54 - member: serviceAccount:edge-dev1-pubsub@hsp-pstream-cug01-prep.iam.gserviceaccount.com
55 role: roles/pubsub.subscriber
56 resourceRef:
57 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
58 kind: PubSubSubscription
59 external: projects/${gcp_project_id}/subscriptions/dsp-notifications-subscription
View as plain text