1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: ctlfish
5 labels:
6 platform.edge.ncr.com/component: ctlfish
7 cluster_hash: ${cluster_hash}
8 cluster_uuid: ${cluster_uuid}
9 namespace: ctlfish
10 annotations:
11 cnrm.cloud.google.com/project-id: ${gcp_project_id}
12 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
13 pallet.edge.ncr.com/name: ctlfish
14 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
15 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
16 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
17 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
18spec:
19 member: serviceAccount:ctlfish-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
20 resourceRef:
21 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
22 kind: PubSubTopic
23 external: "projects/${foreman_gcp_project_id}/topics/ctlfish-pubsub"
24 role: roles/pubsub.publisher
25---
26apiVersion: iam.cnrm.cloud.google.com/v1beta1
27kind: IAMPolicyMember
28metadata:
29 name: ctlfish-workload-id
30 labels:
31 platform.edge.ncr.com/component: ctlfish
32 cluster_hash: ${cluster_hash}
33 cluster_uuid: ${cluster_uuid}
34 namespace: ctlfish
35 annotations:
36 cnrm.cloud.google.com/project-id: ${gcp_project_id}
37 description: |
38 Binds the K8s SA used by ctlfish to the GCP IAM
39 service account defined in the base.
40 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
41 pallet.edge.ncr.com/name: ctlfish
42 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
43 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
44 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
45 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
46spec:
47 member: serviceAccount:${gcp_project_id}.svc.id.goog[ctlfish/ctlfish]
48 resourceRef:
49 name: ctlfish
50 apiVersion: iam.cnrm.cloud.google.com/v1beta1
51 kind: IAMServiceAccount
52 role: roles/iam.workloadIdentityUser
53---
54apiVersion: iam.cnrm.cloud.google.com/v1beta1
55kind: IAMServiceAccount
56metadata:
57 name: ctlfish
58 labels:
59 platform.edge.ncr.com/component: ctlfish
60 cluster_hash: ${cluster_hash}
61 cluster_uuid: ${cluster_uuid}
62 namespace: ctlfish
63 annotations:
64 cnrm.cloud.google.com/project-id: ${gcp_project_id}
65 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
66 pallet.edge.ncr.com/name: ctlfish
67 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
68 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
69 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
70 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
71spec:
72 displayName: ctlfish pub sub service account
73 resourceID: ctlfish-${cluster_hash}
View as plain text