apiVersion: observability.pingcap.com/v1
kind: IAM
metadata:
  name: test-role-sample
  labels:
    observability.pingcap.com/alias: jinwei-test-role-02
spec:
  gcp:
    assumeRoleAccounts: ["serviceAccount:jinwei-test-o11y@pingcap-gardener.iam.gserviceaccount.com"]
    policies:
      "cloudstorage:jinwei-test-iam":
      -  policyName: "t1" 
         policyRole: "roles/storage.admin"
         policyCondition: "resource.name.startsWith('projects/_/buckets/jinwei-test-iam/objects/o11y')"
      -  policyName: "t2" 
         policyRole: "roles/storage.admin"
         policyCondition: "resource.name.startsWith('projects/_/buckets/jinwei-test-iam/objects/metrics')"