Skip to content

Commit 32b2e72

Browse files
committed
update osdocs
1 parent e48c02b commit 32b2e72

File tree

2 files changed

+23
-22
lines changed

2 files changed

+23
-22
lines changed

modules/ccs-gcp-customer-procedure.adoc

-6
Original file line numberDiff line numberDiff line change
@@ -99,12 +99,6 @@ The following roles must be link:https://cloud.google.com/iam/docs/granting-role
9999
|Organization Policy Viewer
100100
|`roles/orgpolicy.policyViewer`
101101

102-
// |Owner
103-
// |`roles/owner`
104-
105-
// |Project IAM Admin
106-
// |`roles/resourcemanager.projectIamAdmin`
107-
108102
|Service Management Administrator
109103
|`roles/servicemanagement.admin`
110104

modules/ccs-gcp-provisioned.adoc

+23-16
Original file line numberDiff line numberDiff line change
@@ -46,28 +46,35 @@ GCP compute instances are required to deploy the control plane and data plane fu
4646

4747
The following services must be enabled on a GCP CCS cluster:
4848

49-
* `Deploymentmanager`
50-
* `Compute`
51-
* `Cloudapis`
52-
* `Cloudresourcemanager`
53-
* `DNS`
54-
* `Iamcredentials`
55-
* `IAM`
56-
* `Servicemanagement`
57-
* `Serviceusage`
58-
* `Storage-api`
59-
* `Storage-component`
49+
* `deploymentmanager`
50+
* `compute`
51+
* `cloudapis`
52+
* `cloudresourcemanager`
53+
* `dns`
54+
* `iamcredentials`
55+
* `iam`
56+
* `servicemanagement`
57+
* `serviceusage`
58+
* `storage-api`
59+
* `storage-component`
60+
* `orgpolicy`
61+
* `networksecurity`
6062

6163
[id="gcp-policy-permissions_{context}"]
6264
== Permissions
6365

6466
The following roles must be added to the support service account:
6567

66-
* `Compute.admin`
67-
* `Dns.admin`
68+
* `compute.admin`
69+
* `dns.admin`
6870
* `orgpolicy.policyViewer`
69-
* `Owner`
70-
* `resourcemanager.projectIamAdmin`
71-
* `Servicemanagement.admin`
71+
* `servicemanagement.admin`
7272
* `serviceusage.serviceUsageAdmin`
7373
* `storage.admin`
74+
* `compute.loadBalancerAdmin`
75+
* `viewer`
76+
* `iam.roleAdmin`
77+
* `iam.securityAdmin`
78+
* `iam.serviceAccountKeyAdmin`
79+
* `iam.serviceAccountAdmin`
80+
* `iam.serviceAccountUser`

0 commit comments

Comments
 (0)