1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: couchctl-banner-secret-admin
5 namespace: couchctl
6 annotations:
7 cnrm.cloud.google.com/project-id: ${gcp_project_id}
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: couchctl
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14 labels:
15 cluster_hash: ${cluster_hash}
16 cluster_uuid: ${cluster_uuid}
17spec:
18 member: serviceAccount:couchctl-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
19 resourceRef:
20 apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
21 kind: Project
22 external: "${gcp_project_id}"
23 role: roles/secretmanager.admin
24---
25apiVersion: iam.cnrm.cloud.google.com/v1beta1
26kind: IAMPolicyMember
27metadata:
28 name: couchctl-workload-identity-user
29 namespace: couchctl
30 annotations:
31 cnrm.cloud.google.com/project-id: ${gcp_project_id}
32 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
33 pallet.edge.ncr.com/name: couchctl
34 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
35 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
36 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
37 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
38 labels:
39 cluster_hash: ${cluster_hash}
40 cluster_uuid: ${cluster_uuid}
41spec:
42 member: serviceAccount:${gcp_project_id}.svc.id.goog[couchctl/couchctl]
43 resourceRef:
44 name: couchctl
45 apiVersion: iam.cnrm.cloud.google.com/v1beta1
46 kind: IAMServiceAccount
47 role: roles/iam.workloadIdentityUser
48---
49apiVersion: iam.cnrm.cloud.google.com/v1beta1
50kind: IAMServiceAccount
51metadata:
52 name: couchctl
53 namespace: couchctl
54 annotations:
55 cnrm.cloud.google.com/project-id: ${gcp_project_id}
56 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
57 pallet.edge.ncr.com/name: couchctl
58 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
59 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
60 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-data-sync'
61 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
62 labels:
63 cluster_hash: ${cluster_hash}
64 cluster_uuid: ${cluster_uuid}
65spec:
66 displayName: Couchctl SA
67 resourceID: couchctl-${cluster_hash}
View as plain text