1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMServiceAccount
3metadata:
4 name: lumper-controller
5spec:
6 displayName: ${cluster_hash} OCI controller
7 resourceID: lumperctl-${cluster_hash}
8---
9apiVersion: iam.cnrm.cloud.google.com/v1beta1
10kind: IAMPolicyMember
11metadata:
12 name: lumper-controller-artifact-read
13spec:
14 member: serviceAccount:lumperctl-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
15 resourceRef:
16 apiVersion: artifactregistry.cnrm.cloud.google.com/v1beta1
17 kind: ArtifactRegistryRepository
18 external: projects/${foreman_gcp_project_id}/locations/us-east1/repositories/warehouse
19 role: roles/artifactregistry.reader
View as plain text