update samples for version 1.4.0

GoogleCloudPlatform · Mar 3, 2020 · 7129bb3 · 7129bb3
1 parent 2a2bea7
commit 7129bb3
Show file tree

Hide file tree

Showing 6 changed files with 56 additions and 0 deletions.
diff --git a/resources/iampolicy/kms-policy-with-condition/iam_v1beta1_iampolicy.yaml b/resources/iampolicy/kms-policy-with-condition/iam_v1beta1_iampolicy.yaml
@@ -0,0 +1,20 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMPolicy
+metadata:
+  labels:
+    label-one: value-one
+  name: iampolicy-sample-condition
+spec:
+  resourceRef:
+    apiVersion: kms.cnrm.cloud.google.com/v1beta1
+    kind: KMSKeyRing
+    name: iampolicy-dep-condition
+  bindings:
+    - role: roles/cloudkms.admin
+      condition:
+        title: expires_after_2019_12_31
+        description: Expires at midnight of 2019-12-31
+        expression: request.time < timestamp("2020-01-01T00:00:00Z")
+      members:
+        # replace ${PROJECT_ID?} with your project name
+        - serviceAccount:iampolicy-dep-condition@${PROJECT_ID?}.iam.gserviceaccount.com
diff --git a/resources/iampolicy/kms-policy-with-condition/iam_v1beta1_iamserviceaccount.yaml b/resources/iampolicy/kms-policy-with-condition/iam_v1beta1_iamserviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMServiceAccount
+metadata:
+  name: iampolicy-dep-condition
diff --git a/resources/iampolicy/kms-policy-with-condition/kms_v1beta1_kmskeyring.yaml b/resources/iampolicy/kms-policy-with-condition/kms_v1beta1_kmskeyring.yaml
@@ -0,0 +1,6 @@
+apiVersion: kms.cnrm.cloud.google.com/v1beta1
+kind: KMSKeyRing
+metadata:
+  name: iampolicy-dep-condition
+spec:
+  location: us-central1
diff --git a/resources/iampolicymember/kms-policy-member-with-condition/iam_v1beta1_iampolicymember.yaml b/resources/iampolicymember/kms-policy-member-with-condition/iam_v1beta1_iampolicymember.yaml
@@ -0,0 +1,16 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMPolicyMember
+metadata:
+  name: iampolicymember-sample-condition
+spec:
+  # replace ${PROJECT_ID?} with your project name
+  member: serviceAccount:iampolicymember-dep-condition@${PROJECT_ID?}.iam.gserviceaccount.com
+  role: roles/cloudkms.admin
+  condition:
+    title: expires_after_2019_12_31
+    description: Expires at midnight of 2019-12-31
+    expression: request.time < timestamp("2020-01-01T00:00:00Z")
+  resourceRef:
+    apiVersion: kms.cnrm.cloud.google.com/v1beta1
+    kind: KMSKeyRing
+    name: iampolicymember-dep-condition
diff --git a/...urces/iampolicymember/kms-policy-member-with-condition/iam_v1beta1_iamserviceaccount.yaml b/...urces/iampolicymember/kms-policy-member-with-condition/iam_v1beta1_iamserviceaccount.yaml
@@ -0,0 +1,4 @@
+apiVersion: iam.cnrm.cloud.google.com/v1beta1
+kind: IAMServiceAccount
+metadata:
+  name: iampolicymember-dep-condition
diff --git a/resources/iampolicymember/kms-policy-member-with-condition/kms_v1beta1_kmskeyring.yaml b/resources/iampolicymember/kms-policy-member-with-condition/kms_v1beta1_kmskeyring.yaml
@@ -0,0 +1,6 @@
+apiVersion: kms.cnrm.cloud.google.com/v1beta1
+kind: KMSKeyRing
+metadata:
+  name: iampolicymember-dep-condition
+spec:
+  location: us-central1