1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: kinform-publisher
5 labels:
6 platform.edge.ncr.com/component: kinform
7 cluster_hash: ${cluster_hash}
8 cluster_uuid: ${cluster_uuid}
9 namespace: kinform
10 annotations:
11 cnrm.cloud.google.com/project-id: ${gcp_project_id}
12 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
13 pallet.edge.ncr.com/name: kinform-client
14 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
15 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
16 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
17 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
18spec:
19 member: serviceAccount:kinform-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
20 resourceRef:
21 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
22 kind: PubSubTopic
23 # references static per-tenant topic name defined in kinform-tenant-infra
24 external: "projects/${gcp_project_id}/topics/kinform"
25 role: roles/pubsub.publisher
26---
27apiVersion: iam.cnrm.cloud.google.com/v1beta1
28kind: IAMServiceAccount
29metadata:
30 name: kinform
31 labels:
32 platform.edge.ncr.com/component: kinform
33 cluster_hash: ${cluster_hash}
34 cluster_uuid: ${cluster_uuid}
35 namespace: kinform
36 annotations:
37 cnrm.cloud.google.com/project-id: ${gcp_project_id}
38 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
39 pallet.edge.ncr.com/name: kinform-client
40 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
41 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
42 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
43 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
44spec:
45 resourceID: kinform-${cluster_hash}
46---
47apiVersion: iam.cnrm.cloud.google.com/v1beta1
48kind: IAMServiceAccountKey
49metadata:
50 name: kinform-gcp-api-key
51 labels:
52 platform.edge.ncr.com/component: kinform
53 cluster_hash: ${cluster_hash}
54 cluster_uuid: ${cluster_uuid}
55 namespace: kinform
56 annotations:
57 cnrm.cloud.google.com/project-id: ${gcp_project_id}
58 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
59 pallet.edge.ncr.com/name: kinform-client
60 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
61 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
62 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
63 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
64spec:
65 serviceAccountRef:
66 name: kinform
67---
68apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
69kind: SecretManagerSecret
70metadata:
71 name: kinform-client-${cluster_uuid}-gcp-api-key
72 labels:
73 platform.edge.ncr.com/component: kinform
74 cluster_hash: ${cluster_hash}
75 cluster_uuid: ${cluster_uuid}
76 namespace: kinform
77 annotations:
78 cnrm.cloud.google.com/project-id: ${gcp_project_id}
79 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
80 pallet.edge.ncr.com/name: kinform-client
81 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
82 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
83 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
84 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
85spec:
86 replication:
87 automatic: true
88---
89apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
90kind: SecretManagerSecretVersion
91metadata:
92 name: kinform-client-${cluster_uuid}-gcp-api-key
93 labels:
94 platform.edge.ncr.com/component: kinform
95 cluster_hash: ${cluster_hash}
96 cluster_uuid: ${cluster_uuid}
97 namespace: kinform
98 annotations:
99 cnrm.cloud.google.com/project-id: ${gcp_project_id}
100 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
101 pallet.edge.ncr.com/name: kinform-client
102 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
103 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
104 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
105 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
106spec:
107 secretRef:
108 name: kinform-client-${cluster_uuid}-gcp-api-key
109 enabled: true
110 secretData:
111 valueFrom:
112 secretKeyRef:
113 name: kinform-gcp-api-key
114 key: key.json
View as plain text