Skip to content

Commit b77ab73

Browse files
authored
Merge pull request #72303 from mletalie/OSDOCS-9635
[OSDOCS-9635]: Update roles for the osd-ccs-admin service account
2 parents 4f5ab1a + e7762fa commit b77ab73

File tree

2 files changed

+29
-5
lines changed

2 files changed

+29
-5
lines changed

modules/ccs-gcp-customer-procedure.adoc

Lines changed: 26 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -93,17 +93,17 @@ The following roles must be link:https://cloud.google.com/iam/docs/granting-role
9393
|Compute Admin
9494
|`roles/compute.admin`
9595

96-
|DNS Admin
96+
|DNS Administrator
9797
|`roles/dns.admin`
9898

9999
|Organizational Policy Viewer
100100
|`roles/orgpolicy.policyViewer`
101101

102-
|Owner
103-
|`roles/owner`
102+
// |Owner
103+
// |`roles/owner`
104104

105-
|Project IAM Admin
106-
|`roles/resourcemanager.projectIamAdmin`
105+
// |Project IAM Admin
106+
// |`roles/resourcemanager.projectIamAdmin`
107107

108108
|Service Management Administrator
109109
|`roles/servicemanagement.admin`
@@ -114,6 +114,27 @@ The following roles must be link:https://cloud.google.com/iam/docs/granting-role
114114
|Storage Admin
115115
|`roles/storage.admin`
116116

117+
|Compute Load Balancer Admin
118+
|`roles/compute.loadBalancerAdmin`
119+
120+
|Role Viewer
121+
|`roles/viewer`
122+
123+
|Role Administrator
124+
|`roles/iam.roleAdmin`
125+
126+
|Security Admin
127+
|`roles/iam.securityAdmin`
128+
129+
|Service Account Key Admin
130+
|`roles/iam.serviceAccountKeyAdmin`
131+
132+
|Service Account Admin
133+
|`roles/iam.serviceAccountAdmin`
134+
135+
|Service Account User
136+
|`roles/iam.serviceAccountUser`
137+
117138
|===
118139

119140
. link:https://cloud.google.com/iam/docs/creating-managing-service-account-keys#creating_service_account_keys[Create the service account key] for the `osd-ccs-admin` IAM service account. Export the key to a file named `osServiceAccount.json`; this JSON file will be uploaded in {cluster-manager-first} when you create your cluster.

modules/osd-create-cluster-ccs.adoc

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,9 @@ The project name must be 10 characters or less.
7070
** Service Management Administrator
7171
** Service Usage Admin
7272
** Storage Admin
73+
** Compute Load Balancer Admin
74+
** Role Viewer
75+
** Role Administrator
7376
* You have created a key for your `osd-ccs-admin` GCP service account and exported it to a file named `osServiceAccount.json`.
7477
+
7578
[NOTE]

0 commit comments

Comments
 (0)