Merge pull request #935 from flavianmissi/CCO-248

IR-408: request individual permissions for gcs

Author: openshift-merge-bot[bot]

manifests/01-registry-credentials-request-gcs.yaml

@@ -17,9 +17,17 @@ spec:
   providerSpec:
     apiVersion: cloudcredential.openshift.io/v1
     kind: GCPProviderSpec
-    predefinedRoles:
-    - roles/storage.admin
-    - roles/resourcemanager.tagUser
+    permissions:
+      - storage.buckets.create
+      - storage.buckets.delete
+      - storage.buckets.get
+      - storage.buckets.list
+      - storage.buckets.createTagBinding
+      - storage.buckets.listEffectiveTags
+      - storage.objects.create
+      - storage.objects.delete
+      - storage.objects.get
+      - storage.objects.list
     skipServiceCheck: true
   serviceAccountNames:
   - cluster-image-registry-operator