1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: lumper-controller-artifact-read
5 namespace: warehouse-system
6 annotations:
7 cnrm.cloud.google.com/project-id: ${gcp_project_id}
8 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
9 pallet.edge.ncr.com/name: lumper-controller
10 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
11 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
12 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
13 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
14 labels:
15 cluster_hash: ${cluster_hash}
16 cluster_uuid: ${cluster_uuid}
17spec:
18 member: serviceAccount:lumperctl-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
19 resourceRef:
20 apiVersion: artifactregistry.cnrm.cloud.google.com/v1beta1
21 kind: ArtifactRegistryRepository
22 external: "projects/${foreman_gcp_project_id}/locations/us-east1/repositories/warehouse"
23 role: roles/artifactregistry.reader
24---
25apiVersion: iam.cnrm.cloud.google.com/v1beta1
26kind: IAMPolicyMember
27metadata:
28 name: lumper-controller-workload-id
29 namespace: warehouse-system
30 annotations:
31 cnrm.cloud.google.com/project-id: ${gcp_project_id}
32 description: |
33 Binds the K8s SA used by lumper-controller to the GCP IAM
34 service account defined in the base.
35 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
36 pallet.edge.ncr.com/name: lumper-controller
37 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
38 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
39 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
40 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
41 labels:
42 cluster_hash: ${cluster_hash}
43 cluster_uuid: ${cluster_uuid}
44spec:
45 member: serviceAccount:${gcp_project_id}.svc.id.goog[warehouse-system/lumperctl]
46 resourceRef:
47 name: lumper-controller
48 apiVersion: iam.cnrm.cloud.google.com/v1beta1
49 kind: IAMServiceAccount
50 role: roles/iam.workloadIdentityUser
51---
52apiVersion: iam.cnrm.cloud.google.com/v1beta1
53kind: IAMServiceAccount
54metadata:
55 name: lumper-controller
56 namespace: warehouse-system
57 annotations:
58 cnrm.cloud.google.com/project-id: ${gcp_project_id}
59 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
60 pallet.edge.ncr.com/name: lumper-controller
61 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
62 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
63 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-foundation'
64 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
65 labels:
66 cluster_hash: ${cluster_hash}
67 cluster_uuid: ${cluster_uuid}
68spec:
69 displayName: ${cluster_hash} OCI controller
70 resourceID: lumperctl-${cluster_hash}
View as plain text