File tree 2 files changed +23
-22
lines changed
2 files changed +23
-22
lines changed Original file line number Diff line number Diff line change @@ -99,12 +99,6 @@ The following roles must be link:https://cloud.google.com/iam/docs/granting-role
99
99
|Organization Policy Viewer
100
100
|`roles/orgpolicy.policyViewer`
101
101
102
- // |Owner
103
- // |`roles/owner`
104
-
105
- // |Project IAM Admin
106
- // |`roles/resourcemanager.projectIamAdmin`
107
-
108
102
|Service Management Administrator
109
103
|`roles/servicemanagement.admin`
110
104
Original file line number Diff line number Diff line change @@ -46,28 +46,35 @@ GCP compute instances are required to deploy the control plane and data plane fu
46
46
47
47
The following services must be enabled on a GCP CCS cluster:
48
48
49
- * `Deploymentmanager`
50
- * `Compute`
51
- * `Cloudapis`
52
- * `Cloudresourcemanager`
53
- * `DNS`
54
- * `Iamcredentials`
55
- * `IAM`
56
- * `Servicemanagement`
57
- * `Serviceusage`
58
- * `Storage-api`
59
- * `Storage-component`
49
+ * `deploymentmanager`
50
+ * `compute`
51
+ * `cloudapis`
52
+ * `cloudresourcemanager`
53
+ * `dns`
54
+ * `iamcredentials`
55
+ * `iam`
56
+ * `servicemanagement`
57
+ * `serviceusage`
58
+ * `storage-api`
59
+ * `storage-component`
60
+ * `orgpolicy`
61
+ * `networksecurity`
60
62
61
63
[id="gcp-policy-permissions_{context}"]
62
64
== Permissions
63
65
64
66
The following roles must be added to the support service account:
65
67
66
- * `Compute .admin`
67
- * `Dns .admin`
68
+ * `compute .admin`
69
+ * `dns .admin`
68
70
* `orgpolicy.policyViewer`
69
- * `Owner`
70
- * `resourcemanager.projectIamAdmin`
71
- * `Servicemanagement.admin`
71
+ * `servicemanagement.admin`
72
72
* `serviceusage.serviceUsageAdmin`
73
73
* `storage.admin`
74
+ * `compute.loadBalancerAdmin`
75
+ * `viewer`
76
+ * `iam.roleAdmin`
77
+ * `iam.securityAdmin`
78
+ * `iam.serviceAccountKeyAdmin`
79
+ * `iam.serviceAccountAdmin`
80
+ * `iam.serviceAccountUser`
You can’t perform that action at this time.
0 commit comments