File tree Expand file tree Collapse file tree 2 files changed +42
-43
lines changed Expand file tree Collapse file tree 2 files changed +42
-43
lines changed Original file line number Diff line number Diff line change @@ -45,47 +45,4 @@ resource "bytebase_iam_policy" "workspace_iam" {
4545 ]
4646 }
4747 }
48- }
49-
50- resource "bytebase_iam_policy" "project_iam" {
51- depends_on = [
52- bytebase_group . developers ,
53- bytebase_user . workspace_dba1 ,
54- bytebase_user . workspace_dba2
55- ]
56-
57- parent = bytebase_project. project-two . name
58-
59- iam_policy {
60-
61- binding {
62- role = " roles/projectOwner"
63- members = [
64- format (" user:%s" , bytebase_user. workspace_dba1 . email ),
65- format (" user:%s" , bytebase_user. workspace_dba2 . email )
66- ]
67- }
68-
69- binding {
70- role = " roles/projectDeveloper"
71- members = [
72- " allUsers" ,
73- format (" group:%s" , bytebase_group. developers . email )
74- ]
75- }
76-
77- binding {
78- role = " roles/sqlEditorUser"
79- members = [
80- format (" group:%s" , bytebase_group. developers . email )
81- ]
82- condition {
83- database = " instances/prod-sample-instance/databases/hr_prod"
84- schema = " public"
85- tables = [" employee" ," salary" ]
86- expire_timestamp = " 2027-07-10T16:17:49Z"
87- }
88- }
89-
90- }
9148}
Original file line number Diff line number Diff line change 1+ resource "bytebase_iam_policy" "project_iam" {
2+ depends_on = [
3+ bytebase_group . developers ,
4+ bytebase_user . workspace_dba1 ,
5+ bytebase_user . workspace_dba2
6+ ]
7+
8+ parent = bytebase_project. project-two . name
9+
10+ iam_policy {
11+
12+ binding {
13+ role = " roles/projectOwner"
14+ members = [
15+ format (" user:%s" , bytebase_user. workspace_dba1 . email ),
16+ format (" user:%s" , bytebase_user. workspace_dba2 . email )
17+ ]
18+ }
19+
20+ binding {
21+ role = " roles/projectDeveloper"
22+ members = [
23+ " allUsers" ,
24+ format (" group:%s" , bytebase_group. developers . email )
25+ ]
26+ }
27+
28+ binding {
29+ role = " roles/sqlEditorUser"
30+ members = [
31+ format (" group:%s" , bytebase_group. developers . email )
32+ ]
33+ condition {
34+ database = " instances/prod-sample-instance/databases/hr_prod"
35+ schema = " public"
36+ tables = [" employee" ," salary" ]
37+ expire_timestamp = " 2027-07-10T16:17:49Z"
38+ }
39+ }
40+
41+ }
42+ }
You can’t perform that action at this time.
0 commit comments