源文件

fixtures/compliant/runtime-sa.yaml

离线配置。未部署到任何云账号。

sa: insights-api-sa
email: insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
purpose: runtime
bindings:
  - member: serviceAccount:insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
    role: roles/secretmanager.secretAccessor
    resource: projects/thistle-analytics-demo/secrets/insights-api-signing-key
    purpose: runtime
    sa: insights-api-sa
  - member: serviceAccount:insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
    role: roles/logging.logWriter
    resource: projects/thistle-analytics-demo
    purpose: runtime
    sa: insights-api-sa