From 5fe493ec76e7a49eebb84ac1b9458a7beb7dfba3 Mon Sep 17 00:00:00 2001 From: Alex Bulankou Date: Fri, 1 Nov 2019 09:30:43 -0700 Subject: [PATCH] update samples for version 0.3.1 --- .../service-account-policy.yaml | 25 +++---------------- 1 file changed, 4 insertions(+), 21 deletions(-) diff --git a/tutorials/auth-service-accounts/service-account-policy.yaml b/tutorials/auth-service-accounts/service-account-policy.yaml index fd87928c09..77ab41d1a6 100644 --- a/tutorials/auth-service-accounts/service-account-policy.yaml +++ b/tutorials/auth-service-accounts/service-account-policy.yaml @@ -13,30 +13,13 @@ # limitations under the License. # [START config_connector_service_accounts_service_account_policy] apiVersion: iam.cnrm.cloud.google.com/v1alpha1 -kind: IAMPolicy +kind: IAMPolicyMember metadata: - name: policy-binding + name: policy-member-binding spec: + member: serviceAccount:pubsub-app@[PROJECT_ID].iam.gserviceaccount.com + role: roles/pubsub.subscriber resourceRef: kind: Project name: [PROJECT_ID] - bindings: - - members: - - serviceAccount:service-[PROJECT_NUMBER]@compute-system.iam.gserviceaccount.com - role: roles/compute.serviceAgent - - members: - - serviceAccount:service-[PROJECT_NUMBER]@container-engine-robot.iam.gserviceaccount.com - role: roles/container.serviceAgent - - members: - - serviceAccount:[PROJECT_NUMBER]-compute@developer.gserviceaccount.com - - serviceAccount:[PROJECT_NUMBER]@cloudservices.gserviceaccount.com - - serviceAccount:service-[PROJECT_NUMBER]@containerregistry.iam.gserviceaccount.com - role: roles/editor - - members: - - serviceAccount:cnrm-system@[PROJECT_ID].iam.gserviceaccount.com - - user:[ACCOUNT] - role: roles/owner - - members: - - serviceAccount:pubsub-app@[PROJECT_ID].iam.gserviceaccount.com - role: roles/pubsub.subscriber # [END config_connector_service_accounts_service_account_policy] \ No newline at end of file