IAMServiceAccount

Property Value
Google Cloud Service Name Cloud IAM
Google Cloud Service Documentation /iam/docs/
Google Cloud REST Resource Name v1.projects.serviceAccounts
Google Cloud REST Resource Documentation /iam/reference/rest/v1/projects.serviceAccounts
Config Connector Resource Short Names gcpiamserviceaccount
gcpiamserviceaccounts
iamserviceaccount
Config Connector Service Name iam.googleapis.com
Config Connector Resource Fully Qualified Name iamserviceaccounts.iam.cnrm.cloud.google.com
Can Be Referenced by IAMPolicy/IAMPolicyMember Yes
Supports IAM Conditions Yes
Supports IAM Audit Configs No
IAM External Reference Format

projects/{{project}}/serviceAccounts/{{account_id}}@{{project}}.iam.gserviceaccount.com

Custom Resource Definition Properties

Annotations

Fields
cnrm.cloud.google.com/project-id

Spec

Schema

  description: string
  displayName: string
Fields

description

Optional

string

A text description of the service account. Must be less than or equal to 256 UTF-8 bytes.

displayName

Optional

string

The display name for the service account. Can be updated without creating a new resource.

Status

Schema

  conditions:
  - lastTransitionTime: string
    message: string
    reason: string
    status: string
    type: string
  email: string
  name: string
  uniqueId: string
Fields
conditions

list (object)

Conditions represents the latest available observation of the resource's current state.

conditions.[]

object

conditions.[].lastTransitionTime

string

Last time the condition transitioned from one status to another.

conditions.[].message

string

Human-readable message indicating details about last transition.

conditions.[].reason

string

Unique, one-word, CamelCase reason for the condition's last transition.

conditions.[].status

string

Status is the status of the condition. Can be True, False, Unknown.

conditions.[].type

string

Type is the type of the condition.

email

string

The e-mail address of the service account. This value should be referenced from any google_iam_policy data sources that would grant the service account privileges.

name

string

The fully-qualified name of the service account.

uniqueId

string

The unique id of the service account.

Sample YAML(s)

Typical Use Case

  # Copyright 2020 Google LLC
  #
  # Licensed under the Apache License, Version 2.0 (the "License");
  # you may not use this file except in compliance with the License.
  # You may obtain a copy of the License at
  #
  #     http://www.apache.org/licenses/LICENSE-2.0
  #
  # Unless required by applicable law or agreed to in writing, software
  # distributed under the License is distributed on an "AS IS" BASIS,
  # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  # See the License for the specific language governing permissions and
  # limitations under the License.
  
  apiVersion: iam.cnrm.cloud.google.com/v1beta1
  kind: IAMServiceAccount
  metadata:
    labels:
      label-one: "value-one"
    name: iamserviceaccount-sample
  spec:
    displayName: Example Service Account