Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unable to Deploy IAMPolicyMember due to error building resource skeleton for getting IAM resource #3507

Open
encodifydipi opened this issue Jan 20, 2025 · 0 comments
Labels
question Further information is requested

Comments

@encodifydipi
Copy link

Describe your question

Description

I am trying to deploy 2 roles for one Service Account using IAMPolicyMember , this is the yaml :

apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMPolicyMember
metadata:
  name: ns-bucketowner
spec:
  memberFrom:
    serviceAccountRef:
      name: webapp-aqua
  role: roles/storage.legacyBucketOwner
  resourceRef:
    kind: StorageBucket
    name: cloud-storage-aqua
    namespace: cloud-storage-lb
---
apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMPolicyMember
metadata:
  name: ns-objectadmin
spec:
  memberFrom:
    serviceAccountRef:
      name: webapp-aqua
  role: roles/storage.objectAdmin
  resourceRef:
    kind: StorageBucket
    name: cloud-storage-aqua

They are deployed using Helm + ArgoCD, through a Jenkins pipeline. From December I am getting this random error :

Update call failed: error building resource skeleton for getting IAM resource: error building unstructured skeleton for getting IAM resource: could not resolve member identity for IAMPolicyMember: couldn't resolve the value for target field email from the referenced resource aquafull2337noparallel/webapp-aqua 

I am puzzled on the issue. Any thoughts / suggestions on how to fix? Thanks

@encodifydipi encodifydipi added the question Further information is requested label Jan 20, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

1 participant