...
1apiVersion: backend.edge.ncr.com/v1alpha2
2kind: DatabaseUser
3metadata:
4 name: ea-pubsub-sa
5spec:
6 type: CLOUD_IAM_SERVICE_ACCOUNT
7 serviceAccount:
8 emailRef: ea-pubsub-sa@${gcp_project_id}.iam.gserviceaccount.com
9 iamUsername: ea-pubsub-sa@${gcp_project_id}.iam
10 force: true
11 grants:
12 - schema: public
13 tableGrant:
14 - permissions:
15 - permission: SELECT
16 table: terminals
17 - permissions:
18 - permission: SELECT
19 table: watched_field_values
20 - permissions:
21 - permission: SELECT
22 table: watched_field_objects
23 instanceRef:
24 name: ${edge_sql_db_name}-migrated
25 projectID: ${gcp_project_id}
26 prune: true
View as plain text