源文件
gcp/iam/insights-api-sa.yaml

离线配置。未部署到任何云账号。
sa: insights-api-sa
email: insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
purpose: runtime
description: Runtime identity for the insights-api Cloud Run service. Not the default compute service account.
bindings:
  - member: serviceAccount:insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
    role: roles/secretmanager.secretAccessor
    resource: projects/thistle-analytics-demo/secrets/insights-api-signing-key
    purpose: runtime
    sa: insights-api-sa
  - member: serviceAccount:insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
    role: roles/logging.logWriter
    resource: projects/thistle-analytics-demo
    purpose: runtime
    sa: insights-api-sa
  - member: serviceAccount:insights-api-sa@thistle-analytics-demo.iam.gserviceaccount.com
    role: roles/cloudtrace.agent
    resource: projects/thistle-analytics-demo
    purpose: runtime
    sa: insights-api-sa