1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: kinform-publisher
5 namespace: kinform
6 labels:
7 platform.edge.ncr.com/component: kinform
8 cluster_hash: ${cluster_hash}
9 cluster_uuid: ${cluster_uuid}
10 annotations:
11 cnrm.cloud.google.com/project-id: ${gcp_project_id}
12 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
13 pallet.edge.ncr.com/name: kinform-client
14 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
15 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
16 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
17 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
18spec:
19 member: serviceAccount:kinform-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
20 resourceRef:
21 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
22 kind: PubSubTopic
23 # references static per-tenant topic name defined in kinform-tenant-infra
24 external: "projects/${gcp_project_id}/topics/kinform"
25 role: roles/pubsub.publisher
26---
27apiVersion: iam.cnrm.cloud.google.com/v1beta1
28kind: IAMPolicyMember
29metadata:
30 name: kinform-workload-id
31 namespace: kinform
32 labels:
33 platform.edge.ncr.com/component: kinform
34 cluster_hash: ${cluster_hash}
35 cluster_uuid: ${cluster_uuid}
36 annotations:
37 cnrm.cloud.google.com/project-id: ${gcp_project_id}
38 description: |
39 Binds the K8s SA used by kinform to the GCP IAM
40 service account defined in the base.
41 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
42 pallet.edge.ncr.com/name: kinform-client
43 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
44 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
45 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
46 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
47spec:
48 member: serviceAccount:${gcp_project_id}.svc.id.goog[kinform/kinform]
49 resourceRef:
50 name: kinform
51 apiVersion: iam.cnrm.cloud.google.com/v1beta1
52 kind: IAMServiceAccount
53 role: roles/iam.workloadIdentityUser
54---
55apiVersion: iam.cnrm.cloud.google.com/v1beta1
56kind: IAMServiceAccount
57metadata:
58 name: kinform
59 namespace: kinform
60 labels:
61 platform.edge.ncr.com/component: kinform
62 cluster_hash: ${cluster_hash}
63 cluster_uuid: ${cluster_uuid}
64 annotations:
65 cnrm.cloud.google.com/project-id: ${gcp_project_id}
66 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
67 pallet.edge.ncr.com/name: kinform-client
68 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
69 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
70 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
71 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
72spec:
73 resourceID: kinform-${cluster_hash}
View as plain text