Skip to content

Commit 820f7a3

Browse files
Merge pull request #60981 from xenolinux/revert-60808-gcp-non-sts-fixes
Revert "OSDOCS#6374: Update the GCP without workload identity section"
2 parents d98aae7 + 2e0c1c2 commit 820f7a3

File tree

1 file changed

+2
-11
lines changed

1 file changed

+2
-11
lines changed

modules/cert-manager-configure-cloud-credentials-gcp-non-sts.adoc

Lines changed: 2 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
// * security/cert_manager_operator/cert-manager-authenticate-non-sts-gcp.adoc
44

55
:_content-type: PROCEDURE
6-
[id="cert-manager-configure-cloud-credentials-gcp-non-sts_{context}"]
6+
[id="cert-manager-prepare-cloud-credentials-gcp-non-sts_{context}"]
77
= Configuring cloud credentials for the {cert-manager-operator} on GCP
88

99
To configure the cloud credentials for the {cert-manager-operator} on a GCP cluster you must create a `CredentialsRequest` object, and allow the Cloud Credential Operator to generate the cloud credentials secret.
@@ -36,15 +36,6 @@ spec:
3636
serviceAccountNames:
3737
- cert-manager
3838
----
39-
+
40-
[NOTE]
41-
====
42-
The `dns.admin` role provides admin privileges to the service account for managing Google Cloud DNS resources. To ensure that the cert-manager runs with the service account that has the least privilege, you can create a custom role with the following permissions:
43-
44-
* `dns.resourceRecordSets.*`
45-
* `dns.changes.*`
46-
* `dns.managedZones.list`
47-
====
4839

4940
. Create a `CredentialsRequest` resource by running the following command:
5041
+
@@ -76,7 +67,7 @@ NAME READY STATUS RESTARTS AGE
7667
cert-manager-bd7fbb9fc-wvbbt 1/1 Running 0 15m39s
7768
----
7869

79-
. Verify that the cert-manager controller pod is updated with GCP credential volumes that are mounted under the path specified in `mountPath` by running the following command:
70+
. Verify that the cert-manager controller pod is updated with GCP workload identity credential volumes that are mounted under the path specified in `mountPath` by running the following command:
8071
+
8172
[source,terminal]
8273
----

0 commit comments

Comments
 (0)