@@ -158,9 +158,47 @@ spec:
158
158
providerSpec :
159
159
apiVersion : cloudcredential.openshift.io/v1
160
160
kind : GCPProviderSpec
161
- predefinedRoles :
162
- - " roles/compute.admin"
163
- - " roles/iam.serviceAccountUser"
161
+ permissions :
162
+ - " iam.serviceAccounts.actAs"
163
+ - " iam.serviceAccounts.get"
164
+ - " iam.serviceAccounts.list"
165
+ - " compute.acceleratorTypes.get"
166
+ - " compute.acceleratorTypes.list"
167
+ - " compute.disks.create"
168
+ - " compute.disks.setLabels"
169
+ - " compute.globalOperations.get"
170
+ - " compute.globalOperations.list"
171
+ - " compute.instanceGroups.create"
172
+ - " compute.instanceGroups.delete"
173
+ - " compute.instanceGroups.get"
174
+ - " compute.instanceGroups.list"
175
+ - " compute.instances.create"
176
+ - " compute.instances.delete"
177
+ - " compute.instances.get"
178
+ - " compute.instances.list"
179
+ - " compute.instances.setLabels"
180
+ - " compute.instances.setMetadata"
181
+ - " compute.instances.setTags"
182
+ - " compute.instances.setServiceAccount"
183
+ - " compute.instances.update"
184
+ - " compute.machineTypes.get"
185
+ - " compute.machineTypes.list"
186
+ - " compute.projects.get"
187
+ - " compute.regionBackendServices.get"
188
+ - " compute.regionBackendServices.create"
189
+ - " compute.regionBackendServices.update"
190
+ - " compute.regions.get"
191
+ - " compute.regions.list"
192
+ - " compute.subnetworks.use"
193
+ - " compute.targetPools.delete"
194
+ - " compute.targetPools.get"
195
+ - " compute.zoneOperations.get"
196
+ - " compute.zoneOperations.list"
197
+ - " compute.zones.get"
198
+ - " compute.zones.list"
199
+ - " serviceusage.quotas.get"
200
+ - " serviceusage.services.get"
201
+ - " serviceusage.services.list"
164
202
165
203
---
166
204
apiVersion : cloudcredential.openshift.io/v1
0 commit comments