1apiVersion: iam.cnrm.cloud.google.com/v1beta1
2kind: IAMPolicyMember
3metadata:
4 name: ctlfish
5 labels:
6 platform.edge.ncr.com/component: ctlfish
7 cluster_hash: ${cluster_hash}
8 cluster_uuid: ${cluster_uuid}
9 namespace: ctlfish
10 annotations:
11 cnrm.cloud.google.com/project-id: ${gcp_project_id}
12 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
13 pallet.edge.ncr.com/name: ctlfish
14 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
15 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
16 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
17 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
18spec:
19 member: serviceAccount:ctlfish-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com
20 resourceRef:
21 apiVersion: pubsub.cnrm.cloud.google.com/v1beta1
22 kind: PubSubTopic
23 external: "projects/${foreman_gcp_project_id}/topics/ctlfish-pubsub"
24 role: roles/pubsub.publisher
25---
26apiVersion: iam.cnrm.cloud.google.com/v1beta1
27kind: IAMServiceAccount
28metadata:
29 name: ctlfish
30 labels:
31 platform.edge.ncr.com/component: ctlfish
32 cluster_hash: ${cluster_hash}
33 cluster_uuid: ${cluster_uuid}
34 namespace: ctlfish
35 annotations:
36 cnrm.cloud.google.com/project-id: ${gcp_project_id}
37 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
38 pallet.edge.ncr.com/name: ctlfish
39 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
40 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
41 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
42 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
43spec:
44 displayName: ctlfish pub sub service account
45 resourceID: ctlfish-${cluster_hash}
46---
47apiVersion: iam.cnrm.cloud.google.com/v1beta1
48kind: IAMServiceAccountKey
49metadata:
50 name: ctlfish-gcp-api-key
51 labels:
52 platform.edge.ncr.com/component: ctlfish
53 cluster_hash: ${cluster_hash}
54 cluster_uuid: ${cluster_uuid}
55 namespace: ctlfish
56 annotations:
57 cnrm.cloud.google.com/project-id: ${gcp_project_id}
58 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
59 pallet.edge.ncr.com/name: ctlfish
60 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
61 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
62 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
63 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
64spec:
65 serviceAccountRef:
66 name: ctlfish
67---
68apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
69kind: SecretManagerSecret
70metadata:
71 name: ctlfish-${cluster_uuid}-gcp-api-key
72 labels:
73 platform.edge.ncr.com/component: ctlfish
74 cluster_hash: ${cluster_hash}
75 cluster_uuid: ${cluster_uuid}
76 namespace: ctlfish
77 annotations:
78 cnrm.cloud.google.com/project-id: ${gcp_project_id}
79 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
80 pallet.edge.ncr.com/name: ctlfish
81 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
82 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
83 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
84 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
85spec:
86 replication:
87 automatic: true
88---
89apiVersion: secretmanager.cnrm.cloud.google.com/v1beta1
90kind: SecretManagerSecretVersion
91metadata:
92 name: ctlfish-${cluster_uuid}-gcp-api-key
93 labels:
94 platform.edge.ncr.com/component: ctlfish
95 cluster_hash: ${cluster_hash}
96 cluster_uuid: ${cluster_uuid}
97 namespace: ctlfish
98 annotations:
99 cnrm.cloud.google.com/project-id: ${gcp_project_id}
100 pallet.edge.ncr.com/created: "2023-02-16T21:26:39Z"
101 pallet.edge.ncr.com/name: ctlfish
102 pallet.edge.ncr.com/revision: 696897a3df910b6e84a88c9336907a17b18159c1
103 pallet.edge.ncr.com/source: https://github.com/ncrvoyix-swt-retail/edge-infra/tree/696897a3df910b6e84a88c9336907a17b18159c1
104 pallet.edge.ncr.com/team: '@ncrvoyix-swt-retail/edge-product'
105 pallet.edge.ncr.com/version: 7.7.7-rc.1676582799+commit.696897a
106spec:
107 secretRef:
108 name: ctlfish-${cluster_uuid}-gcp-api-key
109 enabled: true
110 secretData:
111 valueFrom:
112 secretKeyRef:
113 name: ctlfish-gcp-api-key
114 key: key.json
View as plain text