IAMPolicyMember

condition:  description: string  expression: string  title: string member: string memberFrom:  bigQueryConnectionConnectionRef:  name: string  namespace: string  type: string  logSinkRef:  name: string  namespace: string  serviceAccountRef:  name: string  namespace: string  serviceIdentityRef:  name: string  namespace: string  sqlInstanceRef:  name: string  namespace: string resourceRef:  apiVersion: string  external: string  kind: string  name: string  namespace: string role: string 

conditions: - lastTransitionTime: string  message: string  reason: string  status: string  type: string observedGeneration: integer 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Replace ${PROJECT_ID?} and ${ORG_ID?} below with your desired project and # organization IDs respectively. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-orglevel spec:  member: serviceAccount:iampolicymember-dep-orglevel@${PROJECT_ID?}.iam.gserviceaccount.com  role: roles/storage.admin  resourceRef:  kind: Organization  external: "${ORG_ID?}" --- # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  annotations:  cnrm.cloud.google.com/project-id: ${PROJECT_ID?}  name: iampolicymember-dep-orglevel 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-projlevel spec:  member: serviceAccount:iampolicymember-dep-projlevel@${PROJECT_ID?}.iam.gserviceaccount.com  role: roles/storage.admin  resourceRef:  kind: Project  external: projects/${PROJECT_ID?} --- # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  annotations:  cnrm.cloud.google.com/project-id: ${PROJECT_ID?}  name: iampolicymember-dep-projlevel 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-condition spec:  member: serviceAccount:iampolicymember-dep-condition@${PROJECT_ID?}.iam.gserviceaccount.com  role: roles/cloudkms.admin  condition:  title: expires_after_2019_12_31  description: Expires at midnight of 2019-12-31  expression: request.time < timestamp("2020-01-01T00:00:00Z")  resourceRef:  kind: KMSKeyRing  name: iampolicymember-dep-condition --- # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  annotations:  cnrm.cloud.google.com/project-id: ${PROJECT_ID?}  name: iampolicymember-dep-condition --- apiVersion: kms.cnrm.cloud.google.com/v1beta1 kind: KMSKeyRing metadata:  name: iampolicymember-dep-condition spec:  location: us-central1 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Replace ${PROJECT_ID?} and ${ORG_ID?} below with your desired project and # organization IDs respectively. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-orgrole spec:  member: serviceAccount:iampolicymember-dep-orgrole@${PROJECT_ID?}.iam.gserviceaccount.com  role: organizations/${ORG_ID?}/roles/iampolicymemberdeporgrole  resourceRef:  kind: Project  external: projects/${PROJECT_ID?} --- apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMCustomRole metadata:  annotations:  # Replace "${ORG_ID?}" with your organization ID  cnrm.cloud.google.com/organization-id: "${ORG_ID?}"  name: iampolicymemberdeporgrole spec:  title: Example Organization-Level Custom Role  description: This role only contains two permissions - publish and update  permissions:  - pubsub.topics.publish  - pubsub.topics.update  stage: GA --- # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  annotations:  cnrm.cloud.google.com/project-id: ${PROJECT_ID?}  name: iampolicymember-dep-orgrole 

# Copyright 2024 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-bqccref spec:  memberFrom:  bigQueryConnectionConnectionRef:  type: cloudSQL  name: iampolicymember-dep-bqccref  role: roles/editor  resourceRef:  kind: Project  # Replace ${PROJECT_ID?} with your project ID  external: projects/${PROJECT_ID?} --- apiVersion: bigqueryconnection.cnrm.cloud.google.com/v1beta1 kind: BigQueryConnectionConnection metadata:  name: iampolicymember-dep-bqccref spec:  location: us-central1  projectRef:  # Replace ${PROJECT_ID?} with your project ID  external: ${PROJECT_ID?}  cloudSQL:  instanceRef:  name: iampolicymember-dep-bqccref  databaseRef:   name: iampolicymember-dep-bqccref  type: "MYSQL"  credential:  secretRef:   name: iampolicymember-dep-bqccref --- apiVersion: v1 kind: Secret metadata:  name: iampolicymember-dep-bqccref type: kubernetes.io/basic-auth stringData:  username: iampolicymember-dep-bqccref  password: cGFzc3dvcmQ= --- apiVersion: sql.cnrm.cloud.google.com/v1beta1 kind: SQLDatabase metadata:  name: iampolicymember-dep-bqccref spec:  charset: utf8  instanceRef:  name: iampolicymember-dep-bqccref --- apiVersion: sql.cnrm.cloud.google.com/v1beta1 kind: SQLInstance metadata:  name: iampolicymember-dep-bqccref spec:  databaseVersion: MYSQL_5_7  region: us-central1  settings:  locationPreference:  zone: us-central1-a  tier: db-custom-1-3840 --- apiVersion: sql.cnrm.cloud.google.com/v1beta1 kind: SQLUser metadata:  name: iampolicymember-dep-bqccref spec:  instanceRef:  name: iampolicymember-dep-bqccref  host: foo  password:  valueFrom:  secretKeyRef:  name: iampolicymember-dep-bqccref  key: password 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-memberref spec:  memberFrom:  serviceAccountRef:  name: iampolicymember-dep-memberref  role: roles/editor  resourceRef:  kind: PubSubTopic  name: iampolicymember-dep-memberref --- apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  name: iampolicymember-dep-memberref --- apiVersion: pubsub.cnrm.cloud.google.com/v1beta1 kind: PubSubTopic metadata:  name: iampolicymember-dep-memberref 

# Copyright 2020 Google LLC # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMPolicyMember metadata:  name: iampolicymember-sample-pubsubadmin spec:  member: serviceAccount:iampolicymember-dep-pubsub@${PROJECT_ID?}.iam.gserviceaccount.com  role: roles/editor  resourceRef:  kind: PubSubTopic  name: iampolicymember-dep-pubsubadmin --- # Replace ${PROJECT_ID?} below with your desired project ID. apiVersion: iam.cnrm.cloud.google.com/v1beta1 kind: IAMServiceAccount metadata:  annotations:  cnrm.cloud.google.com/project-id: ${PROJECT_ID?}  name: iampolicymember-dep-pubsub --- apiVersion: pubsub.cnrm.cloud.google.com/v1beta1 kind: PubSubTopic metadata:  name: iampolicymember-dep-pubsubadmin