This message was deleted.
# general
s
This message was deleted.
b
How does terraform do this? Can you show you terraform code
n
Copy code
resource "google_project_iam_custom_role" "custom-role" {
  role_id     = "myRole"
  title       = "custom k8s Role"
  description = "All permissions required to run K8S"
  permissions = [
    "container.clusters.get",
    "container.deployments.list",
    "container.configMaps.get"
  ]
}

resource "google_project_iam_binding" "custom-role-binding" {
  role    = google_project_iam_custom_role.custom-role.id
  members = [
    "serviceAccount:my-account@xxx-test.iam.gserviceaccount.com",
  ]
}
n
Great thanks
Clumsy me, I was looking into the
iam
instead of
projects
b
How does terraform do this? Can you show you terraform code
This is how I usually search for the API. Althought I don't understand what is the diffrence in docs between urls
https://www.pulumi.com/*docs/reference/pkg*/gcp/projects/iambinding/
and
https://www.pulumi.com/*docs/reference/pkg/nodejs/*pulumi/gcp/projects/#IAMBinding
I understand that one is general and second is specific to nodejs, but it that would be unified somehow that would be awesome! Just my 2 cents