Fetch all roles

darkbitio · Aug 6, 2024 · 292e1ab · 292e1ab
1 parent d52db3e
commit 292e1ab
Show file tree

Hide file tree

Showing 8 changed files with 67 additions and 4 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/chronicle.soarServiceAgent b/roles/chronicle.soarServiceAgent
@@ -5,9 +5,14 @@
     "cloudasset.assets.analyzeIamPolicy",
     "cloudasset.assets.searchAllIamPolicies",
     "cloudasset.assets.searchAllResources",
+    "compute.firewalls.get",
+    "compute.firewalls.update",
+    "compute.instances.deleteAccessConfig",
     "compute.instances.get",
     "compute.instances.list",
     "compute.instances.stop",
+    "compute.instances.updateNetworkInterface",
+    "compute.networks.updatePolicy",
     "compute.zones.list",
     "iam.serviceAccounts.disable",
     "iam.serviceAccounts.list",
@@ -21,9 +26,14 @@
     "securitycenter.findings.setState",
     "securitycenter.findings.update",
     "securitycenter.notificationconfig.create",
+    "securitycenter.notificationconfig.delete",
     "securitycenter.notificationconfig.get",
     "securitycenter.notificationconfig.update",
-    "securitycenter.sources.list"
+    "securitycenter.sources.list",
+    "storage.buckets.get",
+    "storage.buckets.getIamPolicy",
+    "storage.buckets.list",
+    "storage.buckets.update"
   ],
   "name": "roles/chronicle.soarServiceAgent",
   "stage": "GA",

diff --git a/roles/container.serviceAgent b/roles/container.serviceAgent
@@ -2,6 +2,9 @@
   "description": "Gives Kubernetes Engine account access to manage cluster resources. Includes access to service accounts.",
   "etag": "AA==",
   "includedPermissions": [
+    "autoscaling.sites.readRecommendations",
+    "autoscaling.sites.writeMetrics",
+    "autoscaling.sites.writeState",
     "bigquery.datasets.create",
     "bigquery.datasets.get",
     "bigquery.tables.create",

diff --git a/roles/datacatalog.migrationConfigAdmin b/roles/datacatalog.migrationConfigAdmin
@@ -0,0 +1,12 @@
+{
+  "description": "Full access to Migration Config",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.organizations.get",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/datacatalog.migrationConfigAdmin",
+  "stage": "BETA",
+  "title": "DataCatalog Migration Config Admin"
+}
diff --git a/roles/managedflink.admin b/roles/managedflink.admin
@@ -0,0 +1,11 @@
+{
+  "description": "Full access to Managed Flink resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/managedflink.admin",
+  "stage": "ALPHA",
+  "title": "Managed Flink Admin"
+}
diff --git a/roles/managedflink.developer b/roles/managedflink.developer
@@ -0,0 +1,11 @@
+{
+  "description": "Full access to Managed Flink Jobs and read access to Deployments.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/managedflink.developer",
+  "stage": "ALPHA",
+  "title": "Managed Flink Developer"
+}
diff --git a/roles/managedflink.viewer b/roles/managedflink.viewer
@@ -0,0 +1,11 @@
+{
+  "description": "Readonly access to Managed Flink resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/managedflink.viewer",
+  "stage": "ALPHA",
+  "title": "Managed Flink Viewer"
+}
diff --git a/roles/monitoring.notificationServiceAgent b/roles/monitoring.notificationServiceAgent
@@ -5,6 +5,7 @@
     "bigquery.jobs.create",
     "cloudfunctions.functions.get",
     "cloudtrace.traces.patch",
+    "logging.links.list",
     "monitoring.metricDescriptors.get",
     "monitoring.metricDescriptors.list",
     "monitoring.monitoredResourceDescriptors.get",