api

type IAMBinding struct {
	// Members is a list of members that are allowed to access the service
	Members []Member `json:"members" yaml:"members"`

	// Role is the role for the members
	Role string `json:"role" yaml:"role"`
}

type IAMPolicy struct {
	// Bindings is a list of bindings that define the access control for the service.
	Bindings []IAMBinding `json:"bindings" yaml:"bindings"`
}

type Member struct {
	// Name is the name of the member. e.g. jlewi@acme.com
	// N.B. In the future we could add a kind field to indicate what type of member it is
	// (e.g.domain, serviceaccount, group).
	Name string     `json:"name" yaml:"name"`
	Kind MemberKind `json:"kind" yaml:"kind"`
}

type MemberKind string

type Metadata struct {
	Name        string            `yaml:"name,omitempty" json:"name,omitempty"`
	Namespace   string            `yaml:"namespace,omitempty" json:"namespace,omitempty"`
	Labels      map[string]string `yaml:"labels,omitempty" json:"labels,omitempty"`
	Annotations map[string]string `yaml:"annotations,omitempty" json:"annotations,omitempty"`
	// ResourceVersion is used for optimistic concurrency.
	// Ref: https://github.com/kubernetes/community/blob/master/contributors/devel/sig-architecture/api-conventions.md#metadata
	// This should be treated as an opaque value by clients.
	ResourceVersion string `yaml:"resourceVersion,omitempty" json:"resourceVersion,omitempty"`
}