Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -758,7 +758,6 @@ class BeamModulePlugin implements Plugin<Project> {
google_cloud_firestore : "com.google.cloud:google-cloud-firestore", // google_cloud_platform_libraries_bom sets version
google_cloud_kms : "com.google.cloud:google-cloud-kms", // google_cloud_platform_libraries_bom sets version
google_cloud_pubsub : "com.google.cloud:google-cloud-pubsub", // google_cloud_platform_libraries_bom sets version
google_cloud_pubsublite : "com.google.cloud:google-cloud-pubsublite", // google_cloud_platform_libraries_bom sets version
// [bomupgrader] the BOM version is set by scripts/tools/bomupgrader.py. If update manually, also update
// libraries-bom version on sdks/java/container/license_scripts/dep_urls_java.yaml
google_cloud_platform_libraries_bom : "com.google.cloud:libraries-bom:26.74.0",
Expand Down Expand Up @@ -788,7 +787,6 @@ class BeamModulePlugin implements Plugin<Project> {
grpc_core : "io.grpc:grpc-core", // google_cloud_platform_libraries_bom sets version
grpc_google_cloud_firestore_v1 : "com.google.api.grpc:grpc-google-cloud-firestore-v1", // google_cloud_platform_libraries_bom sets version
grpc_google_cloud_pubsub_v1 : "com.google.api.grpc:grpc-google-cloud-pubsub-v1", // google_cloud_platform_libraries_bom sets version
grpc_google_cloud_pubsublite_v1 : "com.google.api.grpc:grpc-google-cloud-pubsublite-v1", // google_cloud_platform_libraries_bom sets version
grpc_google_common_protos : "com.google.api.grpc:grpc-google-common-protos", // google_cloud_platform_libraries_bom sets version
grpc_grpclb : "io.grpc:grpc-grpclb", // google_cloud_platform_libraries_bom sets version
grpc_protobuf : "io.grpc:grpc-protobuf", // google_cloud_platform_libraries_bom sets version
Expand Down Expand Up @@ -871,7 +869,6 @@ class BeamModulePlugin implements Plugin<Project> {
proto_google_cloud_firestore_v1 : "com.google.api.grpc:proto-google-cloud-firestore-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_kms_v1 : "com.google.api.grpc:proto-google-cloud-kms-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_pubsub_v1 : "com.google.api.grpc:proto-google-cloud-pubsub-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_pubsublite_v1 : "com.google.api.grpc:proto-google-cloud-pubsublite-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_secret_manager_v1 : "com.google.api.grpc:proto-google-cloud-secretmanager-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_spanner_v1 : "com.google.api.grpc:proto-google-cloud-spanner-v1", // google_cloud_platform_libraries_bom sets version
proto_google_cloud_spanner_admin_database_v1: "com.google.api.grpc:proto-google-cloud-spanner-admin-database-v1", // google_cloud_platform_libraries_bom sets version
Expand Down
69 changes: 65 additions & 4 deletions infra/iam/roles/beam_admin.role.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@
# This file is auto-generated by generate_roles.py.
# Do not edit manually.

# This file was generated on 2025-08-11 14:34:54 UTC
# This file was generated on 2026-01-29 22:47:50 UTC

description: This is the beam_admin role
permissions:
Expand Down Expand Up @@ -61,6 +61,7 @@ permissions:
- bigquery.reservations.delete
- bigquery.routines.delete
- bigquery.rowAccessPolicies.delete
- bigquery.rowAccessPolicies.overrideTimeTravelRestrictions
- bigquery.rowAccessPolicies.setIamPolicy
- bigquery.savedqueries.delete
- bigquery.tables.create
Expand Down Expand Up @@ -89,6 +90,7 @@ permissions:
- cloudkms.ekmConnections.setIamPolicy
- cloudkms.importJobs.setIamPolicy
- cloudkms.keyRings.setIamPolicy
- cloudkms.singleTenantHsmInstanceProposals.delete
- cloudsql.backupRuns.delete
- cloudsql.databases.delete
- cloudsql.instances.delete
Expand Down Expand Up @@ -164,7 +166,11 @@ permissions:
- compute.instances.deleteTagBinding
- compute.instances.setIamPolicy
- compute.instances.stop
- compute.instantSnapshotGroups.delete
- compute.instantSnapshotGroups.setIamPolicy
- compute.instantSnapshots.createTagBinding
- compute.instantSnapshots.delete
- compute.instantSnapshots.deleteTagBinding
- compute.instantSnapshots.setIamPolicy
- compute.interconnectAttachmentGroups.delete
- compute.interconnectAttachments.createTagBinding
Expand All @@ -174,8 +180,12 @@ permissions:
- compute.interconnects.deleteTagBinding
- compute.interconnects.getMacsecConfig
- compute.licenseCodes.setIamPolicy
- compute.licenses.createTagBinding
- compute.licenses.deleteTagBinding
- compute.licenses.setIamPolicy
- compute.machineImages.createTagBinding
- compute.machineImages.delete
- compute.machineImages.deleteTagBinding
- compute.machineImages.setIamPolicy
- compute.multiMig.delete
- compute.networkAttachments.createTagBinding
Expand Down Expand Up @@ -206,21 +216,29 @@ permissions:
- compute.publicDelegatedPrefixes.createTagBinding
- compute.publicDelegatedPrefixes.delete
- compute.publicDelegatedPrefixes.deleteTagBinding
- compute.regionBackendBuckets.createTagBinding
- compute.regionBackendBuckets.delete
- compute.regionBackendBuckets.deleteTagBinding
- compute.regionBackendBuckets.setIamPolicy
- compute.regionBackendServices.createTagBinding
- compute.regionBackendServices.delete
- compute.regionBackendServices.deleteTagBinding
- compute.regionBackendServices.setIamPolicy
- compute.regionCompositeHealthChecks.delete
- compute.regionFirewallPolicies.createTagBinding
- compute.regionFirewallPolicies.delete
- compute.regionFirewallPolicies.deleteTagBinding
- compute.regionFirewallPolicies.setIamPolicy
- compute.regionHealthAggregationPolicies.delete
- compute.regionHealthCheckServices.delete
- compute.regionHealthChecks.createTagBinding
- compute.regionHealthChecks.delete
- compute.regionHealthChecks.deleteTagBinding
- compute.regionHealthSources.delete
- compute.regionNetworkEndpointGroups.createTagBinding
- compute.regionNetworkEndpointGroups.delete
- compute.regionNetworkEndpointGroups.deleteTagBinding
- compute.regionNetworkPolicies.delete
- compute.regionNotificationEndpoints.delete
- compute.regionOperations.delete
- compute.regionSecurityPolicies.createTagBinding
Expand All @@ -244,9 +262,14 @@ permissions:
- compute.regionUrlMaps.createTagBinding
- compute.regionUrlMaps.delete
- compute.regionUrlMaps.deleteTagBinding
- compute.reservations.createTagBinding
- compute.reservations.delete
- compute.reservations.deleteTagBinding
- compute.resourcePolicies.delete
- compute.resourcePolicies.setIamPolicy
- compute.rolloutPlans.delete
- compute.rollouts.cancel
- compute.rollouts.delete
- compute.routers.createTagBinding
- compute.routers.delete
- compute.routers.deleteTagBinding
Expand All @@ -268,7 +291,9 @@ permissions:
- compute.sslCertificates.deleteTagBinding
- compute.sslPolicies.createTagBinding
- compute.sslPolicies.deleteTagBinding
- compute.storagePools.createTagBinding
- compute.storagePools.delete
- compute.storagePools.deleteTagBinding
- compute.storagePools.setIamPolicy
- compute.subnetworks.createTagBinding
- compute.subnetworks.delete
Expand Down Expand Up @@ -300,6 +325,7 @@ permissions:
- compute.targetVpnGateways.deleteTagBinding
- compute.urlMaps.createTagBinding
- compute.urlMaps.deleteTagBinding
- compute.vmExtensionPolicies.delete
- compute.vpnGateways.createTagBinding
- compute.vpnGateways.delete
- compute.vpnGateways.deleteTagBinding
Expand Down Expand Up @@ -387,9 +413,15 @@ permissions:
- dataflow.snapshots.delete
- dataform.commentThreads.delete
- dataform.comments.delete
- dataform.folders.delete
- dataform.folders.setIamPolicy
- dataform.operations.cancel
- dataform.operations.delete
- dataform.releaseConfigs.delete
- dataform.repositories.delete
- dataform.repositories.setIamPolicy
- dataform.teamFolders.delete
- dataform.teamFolders.setIamPolicy
- dataform.workflowConfigs.delete
- dataform.workflowInvocations.cancel
- dataform.workflowInvocations.delete
Expand All @@ -401,10 +433,13 @@ permissions:
- dataplex.assets.setIamPolicy
- dataplex.content.delete
- dataplex.content.setIamPolicy
- dataplex.dataAssets.delete
- dataplex.dataAttributeBindings.delete
- dataplex.dataAttributeBindings.setIamPolicy
- dataplex.dataAttributes.delete
- dataplex.dataAttributes.setIamPolicy
- dataplex.dataProducts.delete
- dataplex.dataProducts.setIamPolicy
- dataplex.dataTaxonomies.delete
- dataplex.dataTaxonomies.setIamPolicy
- dataplex.datascans.delete
Expand Down Expand Up @@ -477,7 +512,9 @@ permissions:
- datastore.userCreds.delete
- dns.managedZones.delete
- dns.managedZones.setIamPolicy
- dns.policies.createTagBinding
- dns.policies.delete
- dns.policies.deleteTagBinding
- dns.resourceRecordSets.delete
- dns.responsePolicies.delete
- dns.responsePolicyRules.delete
Expand All @@ -491,6 +528,12 @@ permissions:
- firebaseabt.experiments.delete
- firebaseappcheck.appCheckTokens.verify
- firebaseappcheck.automations.delete
- firebaseapphosting.backends.delete
- firebaseapphosting.builds.delete
- firebaseapphosting.domains.delete
- firebaseapphosting.operations.cancel
- firebaseapphosting.operations.delete
- firebaseapphosting.rollouts.delete
- firebaseauth.users.delete
- firebasedatabase.instances.delete
- firebasedataconnect.connectorRevisions.delete
Expand All @@ -515,6 +558,7 @@ permissions:
- firebaserules.releases.delete
- firebaserules.rulesets.delete
- firebasestorage.defaultBucket.delete
- firebasevertexai.promptTemplates.delete
- iam.googleapis.com/workloadIdentityPoolProviderKeys.create
- iam.googleapis.com/workloadIdentityPoolProviderKeys.delete
- iam.googleapis.com/workloadIdentityPoolProviderKeys.undelete
Expand All @@ -527,7 +571,9 @@ permissions:
- iam.googleapis.com/workloadIdentityPools.undelete
- iam.googleapis.com/workloadIdentityPools.update
- iam.roles.create
- iam.roles.createTagBinding
- iam.roles.delete
- iam.roles.deleteTagBinding
- iam.roles.undelete
- iam.roles.update
- iam.serviceAccountApiKeyBindings.delete
Expand All @@ -537,6 +583,9 @@ permissions:
- iam.serviceAccounts.deleteTagBinding
- iam.serviceAccounts.setIamPolicy
- iam.serviceAccounts.undelete
- iam.workloadIdentityPools.createPolicyBinding
- iam.workloadIdentityPools.deletePolicyBinding
- iam.workloadIdentityPools.updatePolicyBinding
- iap.tunnel.getIamPolicy
- iap.tunnel.setIamPolicy
- iap.tunnelDestGroups.delete
Expand Down Expand Up @@ -570,16 +619,19 @@ permissions:
- monitoring.uptimeCheckConfigs.delete
- pubsub.schemas.delete
- pubsub.schemas.setIamPolicy
- pubsub.snapshots.createTagBinding
- pubsub.snapshots.delete
- pubsub.snapshots.deleteTagBinding
- pubsub.subscriptions.createTagBinding
- pubsub.subscriptions.delete
- pubsub.subscriptions.deleteTagBinding
- pubsub.subscriptions.getIamPolicy
- pubsub.subscriptions.setIamPolicy
- pubsub.topics.createTagBinding
- pubsub.topics.delete
- pubsub.topics.deleteTagBinding
- pubsub.topics.getIamPolicy
- pubsub.topics.setIamPolicy
- pubsublite.reservations.delete
- pubsublite.subscriptions.delete
- pubsublite.topics.delete
- redis.backupCollections.delete
- redis.backups.delete
- redis.clusters.delete
Expand All @@ -588,7 +640,10 @@ permissions:
- redis.instances.deleteTagBinding
- redis.operations.cancel
- redis.operations.delete
- resourcemanager.projects.createPolicyBinding
- resourcemanager.projects.deletePolicyBinding
- resourcemanager.projects.setIamPolicy
- resourcemanager.projects.updatePolicyBinding
- resourcemanager.tagHolds.delete
- resourcemanager.tagKeys.delete
- resourcemanager.tagKeys.setIamPolicy
Expand Down Expand Up @@ -655,13 +710,19 @@ permissions:
- storage.managedFolders.setIamPolicy
- storage.multipartUploads.list
- storage.objects.delete
- storage.objects.deleteContext
- storage.objects.getIamPolicy
- storage.objects.move
- storage.objects.overrideUnlockedRetention
- storage.objects.restore
- storage.objects.setIamPolicy
- storage.objects.setRetention
- storage.objects.update
- storage.objects.updateContext
- storagebatchoperations.jobs.cancel
- storagebatchoperations.jobs.delete
- storagebatchoperations.operations.cancel
- storagebatchoperations.operations.delete
- storageinsights.datasetConfigs.delete
- storageinsights.operations.cancel
- storageinsights.operations.delete
Expand Down
Loading
Loading