1. Answers
  2. Configuring GCP Artifact Registry Repository IAM Member

How do I configure a GCP Artifact Registry Repository IAM Member with Pulumi?

In this guide, we will configure a Google Cloud Artifact Registry repository IAM member using Pulumi. This involves creating an Artifact Registry repository and assigning IAM roles to a specific member.

Key Points

  • We will create a GCP Artifact Registry repository.
  • We will configure IAM roles for the repository.
  • We will use Pulumi to manage the infrastructure as code.
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

// Create a new Artifact Registry repository
const repository = new gcp.artifactregistry.Repository("my-repo", {
    location: "us-central1",
    format: "DOCKER",
    repositoryId: "my-repo",
    description: "My Artifact Registry Repository",
});

// Configure IAM member for the repository
const iamMember = new gcp.artifactregistry.RepositoryIamMember("my-repo-iam-member", {
    repository: repository.id,
    location: repository.location,
    project: repository.project,
    role: "roles/artifactregistry.reader",
    member: "user:example@example.com",
});

// Export the repository URL
export const repositoryUrl = pulumi.interpolate`https://${repository.location}-docker.pkg.dev/${repository.project}/${repository.repositoryId}`;

Summary

In this guide, we configured a Google Cloud Artifact Registry repository and assigned an IAM role to a specific member using Pulumi. We created the repository, set the IAM member, and exported the repository URL. This setup ensures that the specified user has the necessary permissions to access the repository.

Deploy this code

Want to deploy this code? Sign up for a free Pulumi account to deploy in a few clicks.

Sign up

New to Pulumi?

Want to deploy this code? Sign up with Pulumi to deploy in a few clicks.

Sign up