Use IAMMember for database access

getbranches · Jun 3, 2024 · b2eb973 · b2eb973
1 parent a11bf43
commit b2eb973
Showing 1 changed file with 3 additions and 4 deletions.
diff --git a/stacks/unleash/Pulumi.yaml b/stacks/unleash/Pulumi.yaml
@@ -47,13 +47,12 @@ resources:
         namespace: ${namespace.metadata.name}
         annotations:
           "iam.gke.io/gcp-service-account": ${database:serviceAccountEmail}
-  serviceAccountIamBinding:
-    type: gcp:serviceaccount:IAMBinding
+  serviceAccountIamMember:
+    type: gcp:serviceaccount:IAMMember
     properties:
       serviceAccountId: ${database:serviceAccountId}
       role: roles/iam.workloadIdentityUser
-      members:
-        - serviceAccount:${gcp:project}.svc.id.goog[${namespace.metadata.name}/${serviceAccount.metadata.name}]
+      member: serviceAccount:${gcp:project}.svc.id.goog[${namespace.metadata.name}/${serviceAccount.metadata.name}]
   deployment:
     type: kubernetes:apps/v1:Deployment
     properties: