https://pulumi.com logo
Title
n

numerous-pencil-44890

07/28/2021, 9:54 PM
Does anyone know how to bind a GKE workload identity service account to firestore in Pulumi? The firestore API is pretty limited compared to the other products: https://www.pulumi.com/docs/reference/pkg/gcp/firestore/
Was able to figure it out using project binding, in case anyone else needs it (python):
firestore_iam = gcp.projects.IAMBinding(
    resource_name="firestore-binding",
    project=project,
    role="roles/datastore.owner",
    members=[gcp_sa.email.apply(lambda email: f"serviceAccount:{email}")],
    opts=pulumi.ResourceOptions(provider=gcp_provider),
)