IAMPolicyMember

  condition 
 : 
  
 description 
 : 
  
 string 
  
 expression 
 : 
  
 string 
  
 title 
 : 
  
 string 
 member 
 : 
  
 string 
 memberFrom 
 : 
  
 bigQueryConnectionConnectionRef 
 : 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
  
 type 
 : 
  
 string 
  
 logSinkRef 
 : 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
  
 serviceAccountRef 
 : 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
  
 serviceIdentityRef 
 : 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
  
 sqlInstanceRef 
 : 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
 resourceRef 
 : 
  
 apiVersion 
 : 
  
 string 
  
 external 
 : 
  
 string 
  
 kind 
 : 
  
 string 
  
 name 
 : 
  
 string 
  
 namespace 
 : 
  
 string 
 role 
 : 
  
 string 
 

  conditions 
 : 
 - 
  
 lastTransitionTime 
 : 
  
 string 
  
 message 
 : 
  
 string 
  
 reason 
 : 
  
 string 
  
 status 
 : 
  
 string 
  
 type 
 : 
  
 string 
 observedGeneration 
 : 
  
 integer 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 # Replace ${PROJECT_ID?} and ${ORG_ID?} below with your desired project and 
 # organization IDs respectively. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-orglevel 
 spec 
 : 
  
 member 
 : 
  
 serviceAccount:iampolicymember-dep-orglevel@${PROJECT_ID?}.iam.gserviceaccount.com 
  
 role 
 : 
  
 roles/storage.admin 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 Organization 
  
 external 
 : 
  
 "${ORG_ID?}" 
 --- 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 annotations 
 : 
  
 cnrm.cloud.google.com/project-id 
 : 
  
 ${PROJECT_ID?} 
  
 name 
 : 
  
 iampolicymember-dep-orglevel 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-projlevel 
 spec 
 : 
  
 member 
 : 
  
 serviceAccount:iampolicymember-dep-projlevel@${PROJECT_ID?}.iam.gserviceaccount.com 
  
 role 
 : 
  
 roles/storage.admin 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 Project 
  
 external 
 : 
  
 projects/${PROJECT_ID?} 
 --- 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 annotations 
 : 
  
 cnrm.cloud.google.com/project-id 
 : 
  
 ${PROJECT_ID?} 
  
 name 
 : 
  
 iampolicymember-dep-projlevel 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-condition 
 spec 
 : 
  
 member 
 : 
  
 serviceAccount:iampolicymember-dep-condition@${PROJECT_ID?}.iam.gserviceaccount.com 
  
 role 
 : 
  
 roles/cloudkms.admin 
  
 condition 
 : 
  
 title 
 : 
  
 expires_after_2019_12_31 
  
 description 
 : 
  
 Expires at midnight of 2019-12-31 
  
 expression 
 : 
  
 request.time < timestamp("2020-01-01T00:00:00Z") 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 KMSKeyRing 
  
 name 
 : 
  
 iampolicymember-dep-condition 
 --- 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 annotations 
 : 
  
 cnrm.cloud.google.com/project-id 
 : 
  
 ${PROJECT_ID?} 
  
 name 
 : 
  
 iampolicymember-dep-condition 
 --- 
 apiVersion 
 : 
  
 kms.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 KMSKeyRing 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-condition 
 spec 
 : 
  
 location 
 : 
  
 us-central1 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 # Replace ${PROJECT_ID?} and ${ORG_ID?} below with your desired project and 
 # organization IDs respectively. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-orgrole 
 spec 
 : 
  
 member 
 : 
  
 serviceAccount:iampolicymember-dep-orgrole@${PROJECT_ID?}.iam.gserviceaccount.com 
  
 role 
 : 
  
 organizations/${ORG_ID?}/roles/iampolicymemberdeporgrole 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 Project 
  
 external 
 : 
  
 projects/${PROJECT_ID?} 
 --- 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMCustomRole 
 metadata 
 : 
  
 annotations 
 : 
  
 # Replace "${ORG_ID?}" with your organization ID 
  
 cnrm.cloud.google.com/organization-id 
 : 
  
 "${ORG_ID?}" 
  
 name 
 : 
  
 iampolicymemberdeporgrole 
 spec 
 : 
  
 title 
 : 
  
 Example Organization-Level Custom Role 
  
 description 
 : 
  
 This role only contains two permissions - publish and update 
  
 permissions 
 : 
  
 - 
  
 pubsub.topics.publish 
  
 - 
  
 pubsub.topics.update 
  
 stage 
 : 
  
 GA 
 --- 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 annotations 
 : 
  
 cnrm.cloud.google.com/project-id 
 : 
  
 ${PROJECT_ID?} 
  
 name 
 : 
  
 iampolicymember-dep-orgrole 
 

  # Copyright 2024 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-bqccref 
 spec 
 : 
  
 memberFrom 
 : 
  
 bigQueryConnectionConnectionRef 
 : 
  
 type 
 : 
  
 cloudSQL 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
  
 role 
 : 
  
 roles/editor 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 Project 
  
 # Replace ${PROJECT_ID?} with your project ID 
  
 external 
 : 
  
 projects/${PROJECT_ID?} 
 --- 
 apiVersion 
 : 
  
 bigqueryconnection.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 BigQueryConnectionConnection 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 spec 
 : 
  
 location 
 : 
  
 us-central1 
  
 projectRef 
 : 
  
 # Replace ${PROJECT_ID?} with your project ID 
  
 external 
 : 
  
 ${PROJECT_ID?} 
  
 cloudSQL 
 : 
  
 instanceRef 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
  
 databaseRef 
 : 
  
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
  
 type 
 : 
  
 "MYSQL" 
  
 credential 
 : 
  
 secretRef 
 : 
  
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 --- 
 apiVersion 
 : 
  
 v1 
 kind 
 : 
  
 Secret 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 type 
 : 
  
 kubernetes.io/basic-auth 
 stringData 
 : 
  
 username 
 : 
  
 iampolicymember-dep-bqccref 
  
 password 
 : 
  
 cGFzc3dvcmQ= 
 --- 
 apiVersion 
 : 
  
 sql.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 SQLDatabase 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 spec 
 : 
  
 charset 
 : 
  
 utf8 
  
 instanceRef 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 --- 
 apiVersion 
 : 
  
 sql.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 SQLInstance 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 spec 
 : 
  
 databaseVersion 
 : 
  
 MYSQL_5_7 
  
 region 
 : 
  
 us-central1 
  
 settings 
 : 
  
 locationPreference 
 : 
  
 zone 
 : 
  
 us-central1-a 
  
 tier 
 : 
  
 db-custom-1-3840 
 --- 
 apiVersion 
 : 
  
 sql.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 SQLUser 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
 spec 
 : 
  
 instanceRef 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
  
 host 
 : 
  
 foo 
  
 password 
 : 
  
 valueFrom 
 : 
  
 secretKeyRef 
 : 
  
 name 
 : 
  
 iampolicymember-dep-bqccref 
  
 key 
 : 
  
 password 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-memberref 
 spec 
 : 
  
 memberFrom 
 : 
  
 serviceAccountRef 
 : 
  
 name 
 : 
  
 iampolicymember-dep-memberref 
  
 role 
 : 
  
 roles/editor 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 PubSubTopic 
  
 name 
 : 
  
 iampolicymember-dep-memberref 
 --- 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-memberref 
 --- 
 apiVersion 
 : 
  
 pubsub.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 PubSubTopic 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-memberref 
 

  # Copyright 2020 Google LLC 
 # 
 # Licensed under the Apache License, Version 2.0 (the "License"); 
 # you may not use this file except in compliance with the License. 
 # You may obtain a copy of the License at 
 # 
 #     http://www.apache.org/licenses/LICENSE-2.0 
 # 
 # Unless required by applicable law or agreed to in writing, software 
 # distributed under the License is distributed on an "AS IS" BASIS, 
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 
 # See the License for the specific language governing permissions and 
 # limitations under the License. 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMPolicyMember 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-sample-pubsubadmin 
 spec 
 : 
  
 member 
 : 
  
 serviceAccount:iampolicymember-dep-pubsub@${PROJECT_ID?}.iam.gserviceaccount.com 
  
 role 
 : 
  
 roles/editor 
  
 resourceRef 
 : 
  
 kind 
 : 
  
 PubSubTopic 
  
 name 
 : 
  
 iampolicymember-dep-pubsubadmin 
 --- 
 # Replace ${PROJECT_ID?} below with your desired project ID. 
 apiVersion 
 : 
  
 iam.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 IAMServiceAccount 
 metadata 
 : 
  
 annotations 
 : 
  
 cnrm.cloud.google.com/project-id 
 : 
  
 ${PROJECT_ID?} 
  
 name 
 : 
  
 iampolicymember-dep-pubsub 
 --- 
 apiVersion 
 : 
  
 pubsub.cnrm.cloud.google.com/v1beta1 
 kind 
 : 
  
 PubSubTopic 
 metadata 
 : 
  
 name 
 : 
  
 iampolicymember-dep-pubsubadmin