search

GoogleCloudPlatform / k8s-config-connector

GCP Config Connector, a Kubernetes add-on for managing GCP resources
https://cloud.google.com/config-connector/docs/overview
Apache License 2.0
861 stars 202 forks source link

BinaryAuthorizationAttestor - how to allow IAM permissions to have access without IAMPolicyMember? #2085

Open newtondev opened 2 weeks ago

newtondev commented 2 weeks ago

Describe your question

All is fine creating the BinaryAuthorizationAttestor, however we need to give access to various service accounts that need viewer access to the attestor. This resource states that it cannot be referenced by IAMPolicy/IAMPolicyMember.

Kind=BinaryAuthorizationAttestor does not support IAM Policy Member

How can the role roles/binaryauthorization.attestorsViewer be added to the attestor using KCC?