Skip to content

Commit f18b65b

Browse files
committed
OCPBUGS-45404: GCP Permissions are required for destroy
** The getIamPolicy and setIamPolicy permissions are required for GCP destroy xpn installations whether the control plane service account is provided or not.
1 parent 68e8107 commit f18b65b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

modules/minimum-required-permissions-ipi-gcp-xpn.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ Ensure that the host project applies one of the following configurations to the
3939
* `roles/compute.networkUser`
4040
====
4141
42-
If you do not supply a service account for control plane nodes in the `install-config.yaml` file, please grant the below permissions to the service account in the host project.
42+
If you do not supply a service account for control plane nodes in the `install-config.yaml` file, please grant the below permissions to the service account in the host project. If you do not supply a service account for compute nodes in the `install-config.yaml` file, please grant the below permissions to the service account in the host project for cluster destruction.
4343

4444
[%collapsible]
4545
====

0 commit comments

Comments
 (0)