File tree Expand file tree Collapse file tree 2 files changed +23
-22
lines changed Expand file tree Collapse file tree 2 files changed +23
-22
lines changed Original file line number Diff line number Diff line change @@ -99,12 +99,6 @@ The following roles must be link:https://cloud.google.com/iam/docs/granting-role
9999|Organization Policy Viewer
100100|`roles/orgpolicy.policyViewer`
101101
102- // |Owner
103- // |`roles/owner`
104-
105- // |Project IAM Admin
106- // |`roles/resourcemanager.projectIamAdmin`
107-
108102|Service Management Administrator
109103|`roles/servicemanagement.admin`
110104
Original file line number Diff line number Diff line change @@ -46,28 +46,35 @@ GCP compute instances are required to deploy the control plane and data plane fu
4646
4747The following services must be enabled on a GCP CCS cluster:
4848
49- * `Deploymentmanager`
50- * `Compute`
51- * `Cloudapis`
52- * `Cloudresourcemanager`
53- * `DNS`
54- * `Iamcredentials`
55- * `IAM`
56- * `Servicemanagement`
57- * `Serviceusage`
58- * `Storage-api`
59- * `Storage-component`
49+ * `deploymentmanager`
50+ * `compute`
51+ * `cloudapis`
52+ * `cloudresourcemanager`
53+ * `dns`
54+ * `iamcredentials`
55+ * `iam`
56+ * `servicemanagement`
57+ * `serviceusage`
58+ * `storage-api`
59+ * `storage-component`
60+ * `orgpolicy`
61+ * `networksecurity`
6062
6163[id="gcp-policy-permissions_{context}"]
6264== Permissions
6365
6466The following roles must be added to the support service account:
6567
66- * `Compute .admin`
67- * `Dns .admin`
68+ * `compute .admin`
69+ * `dns .admin`
6870* `orgpolicy.policyViewer`
69- * `Owner`
70- * `resourcemanager.projectIamAdmin`
71- * `Servicemanagement.admin`
71+ * `servicemanagement.admin`
7272* `serviceusage.serviceUsageAdmin`
7373* `storage.admin`
74+ * `compute.loadBalancerAdmin`
75+ * `viewer`
76+ * `iam.roleAdmin`
77+ * `iam.securityAdmin`
78+ * `iam.serviceAccountKeyAdmin`
79+ * `iam.serviceAccountAdmin`
80+ * `iam.serviceAccountUser`
You can’t perform that action at this time.
0 commit comments