1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMCustomRole
3metadata:
4 name: logmondev
5 annotations:
6 cnrm.cloud.google.com/deletion-policy: abandon
7 cnrm.cloud.google.com/project-id: ${gcp_project_id}
8 description: |
9 Provides only the required permissions for viewing logs and metrics, and creating dashboards and alerts
10 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
11 pallet.edge.ncr.com/name: o11y-infra
12 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
13 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
14 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
15 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
16 labels:
17 cluster_hash: ${cluster_hash}
18 cluster_uuid: ${cluster_uuid}
19spec:
20 permissions:
21 - cloudnotifications.activities.list
22 - logging.buckets.get
23 - logging.buckets.list
24 - logging.exclusions.get
25 - logging.exclusions.list
26 - logging.locations.get
27 - logging.locations.list
28 - logging.logEntries.download
29 - logging.logEntries.list
30 - logging.logMetrics.create
31 - logging.logMetrics.get
32 - logging.logMetrics.list
33 - logging.logMetrics.delete
34 - logging.logMetrics.update
35 - logging.logServiceIndexes.list
36 - logging.logServices.list
37 - logging.logs.list
38 - logging.notificationRules.create
39 - logging.notificationRules.update
40 - logging.notificationRules.delete
41 - logging.operations.get
42 - logging.operations.list
43 - logging.queries.create
44 - logging.queries.delete
45 - logging.queries.get
46 - logging.queries.list
47 - logging.queries.listShared
48 - logging.queries.share
49 - logging.queries.update
50 - logging.queries.updateShared
51 - logging.sinks.get
52 - logging.sinks.list
53 - logging.usage.get
54 - logging.views.access
55 - logging.views.get
56 - logging.views.list
57 - logging.views.listLogs
58 - logging.views.listResourceKeys
59 - logging.views.listResourceValues
60 - monitoring.alertPolicies.create
61 - monitoring.alertPolicies.delete
62 - monitoring.alertPolicies.get
63 - monitoring.alertPolicies.list
64 - monitoring.alertPolicies.update
65 - monitoring.dashboards.get
66 - monitoring.dashboards.list
67 - monitoring.dashboards.create
68 - monitoring.dashboards.delete
69 - monitoring.dashboards.update
70 - monitoring.groups.get
71 - monitoring.groups.list
72 - monitoring.incidents.get
73 - monitoring.incidents.update
74 - monitoring.metricDescriptors.get
75 - monitoring.metricDescriptors.list
76 - monitoring.monitoredResourceDescriptors.get
77 - monitoring.monitoredResourceDescriptors.list
78 - monitoring.notificationChannelDescriptors.get
79 - monitoring.notificationChannelDescriptors.list
80 - monitoring.notificationChannels.create
81 - monitoring.notificationChannels.delete
82 - monitoring.notificationChannels.get
83 - monitoring.notificationChannels.list
84 - monitoring.notificationChannels.sendVerificationCode
85 - monitoring.notificationChannels.update
86 - monitoring.notificationChannels.verify
87 - monitoring.publicWidgets.get
88 - monitoring.publicWidgets.list
89 - monitoring.services.get
90 - monitoring.services.list
91 - monitoring.slos.get
92 - monitoring.slos.list
93 - monitoring.timeSeries.list
94 - monitoring.uptimeCheckConfigs.create
95 - monitoring.uptimeCheckConfigs.get
96 - monitoring.uptimeCheckConfigs.list
97 - opsconfigmonitoring.resourceMetadata.list
98 - resourcemanager.projects.get
99 - serviceusage.services.use
100 - stackdriver.projects.get
101 title: logmondev
102---
103apiVersion: iam.cnrm.cloud.google.com/v1beta1
104kind: IAMPolicyMember
105metadata:
106 name: github-actions-monitoring-syncing
107 annotations:
108 cnrm.cloud.google.com/deletion-policy: abandon
109 cnrm.cloud.google.com/project-id: ${gcp_project_id}
110 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
111 pallet.edge.ncr.com/name: o11y-infra
112 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
113 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
114 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-o11y'
115 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
116 labels:
117 cluster_hash: ${cluster_hash}
118 cluster_uuid: ${cluster_uuid}
119spec:
120 member: serviceAccount:github-actions-runner@ret-edge-dev-infra.iam.gserviceaccount.com
121 resourceRef:
122 apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
123 kind: Project
124 external: "projects/${gcp_project_id}"
125 role: roles/monitoring.editor
View as plain text