Fetch all roles

darkbitio · Aug 1, 2022 · 6930771 · 6930771
1 parent b6aa0f1
commit 6930771
Show file tree

Hide file tree

Showing 4 changed files with 2 additions and 1 deletion.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
@@ -79,7 +79,7 @@
 {"description":"Administrator access to create and manage repositories.","etag":"AA==","includedPermissions":["artifactregistry.aptartifacts.create","artifactregistry.dockerimages.get","artifactregistry.dockerimages.list","artifactregistry.files.get","artifactregistry.files.list","artifactregistry.locations.get","artifactregistry.locations.list","artifactregistry.mavenartifacts.get","artifactregistry.mavenartifacts.list","artifactregistry.npmpackages.get","artifactregistry.npmpackages.list","artifactregistry.packages.delete","artifactregistry.packages.get","artifactregistry.packages.list","artifactregistry.pythonpackages.get","artifactregistry.pythonpackages.list","artifactregistry.repositories.create","artifactregistry.repositories.createTagBinding","artifactregistry.repositories.delete","artifactregistry.repositories.deleteArtifacts","artifactregistry.repositories.deleteTagBinding","artifactregistry.repositories.downloadArtifacts","artifactregistry.repositories.get","artifactregistry.repositories.getIamPolicy","artifactregistry.repositories.list","artifactregistry.repositories.listEffectiveTags","artifactregistry.repositories.listTagBindings","artifactregistry.repositories.setIamPolicy","artifactregistry.repositories.update","artifactregistry.repositories.uploadArtifacts","artifactregistry.tags.create","artifactregistry.tags.delete","artifactregistry.tags.get","artifactregistry.tags.list","artifactregistry.tags.update","artifactregistry.versions.delete","artifactregistry.versions.get","artifactregistry.versions.list","artifactregistry.yumartifacts.create"],"name":"roles/artifactregistry.admin","stage":"GA","title":"Artifact Registry Administrator","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Access to read repository items.","etag":"AA==","includedPermissions":["artifactregistry.dockerimages.get","artifactregistry.dockerimages.list","artifactregistry.files.get","artifactregistry.files.list","artifactregistry.locations.get","artifactregistry.locations.list","artifactregistry.mavenartifacts.get","artifactregistry.mavenartifacts.list","artifactregistry.npmpackages.get","artifactregistry.npmpackages.list","artifactregistry.packages.get","artifactregistry.packages.list","artifactregistry.pythonpackages.get","artifactregistry.pythonpackages.list","artifactregistry.repositories.downloadArtifacts","artifactregistry.repositories.get","artifactregistry.repositories.list","artifactregistry.repositories.listEffectiveTags","artifactregistry.repositories.listTagBindings","artifactregistry.tags.get","artifactregistry.tags.list","artifactregistry.versions.get","artifactregistry.versions.list"],"name":"roles/artifactregistry.reader","stage":"GA","title":"Artifact Registry Reader","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Access to manage artifacts in repositories.","etag":"AA==","includedPermissions":["artifactregistry.aptartifacts.create","artifactregistry.dockerimages.get","artifactregistry.dockerimages.list","artifactregistry.files.get","artifactregistry.files.list","artifactregistry.locations.get","artifactregistry.locations.list","artifactregistry.mavenartifacts.get","artifactregistry.mavenartifacts.list","artifactregistry.npmpackages.get","artifactregistry.npmpackages.list","artifactregistry.packages.delete","artifactregistry.packages.get","artifactregistry.packages.list","artifactregistry.pythonpackages.get","artifactregistry.pythonpackages.list","artifactregistry.repositories.deleteArtifacts","artifactregistry.repositories.downloadArtifacts","artifactregistry.repositories.get","artifactregistry.repositories.list","artifactregistry.repositories.listEffectiveTags","artifactregistry.repositories.listTagBindings","artifactregistry.repositories.uploadArtifacts","artifactregistry.tags.create","artifactregistry.tags.delete","artifactregistry.tags.get","artifactregistry.tags.list","artifactregistry.tags.update","artifactregistry.versions.delete","artifactregistry.versions.get","artifactregistry.versions.list","artifactregistry.yumartifacts.create"],"name":"roles/artifactregistry.repoAdmin","stage":"GA","title":"Artifact Registry Repository Administrator","asset_type":"iam.googleapis.com/ExportedIAMRole"}
-{"description":"Gives the Artifact Registry service account access to managed resources.","etag":"AA==","includedPermissions":["artifactregistry.repositories.downloadArtifacts","pubsub.topics.publish"],"name":"roles/artifactregistry.serviceAgent","stage":"GA","title":"Artifact Registry Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
+{"description":"Gives the Artifact Registry service account access to managed resources.","etag":"AA==","includedPermissions":["artifactregistry.repositories.downloadArtifacts","artifactregistry.versions.delete","pubsub.topics.publish"],"name":"roles/artifactregistry.serviceAgent","stage":"GA","title":"Artifact Registry Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Access to read and write repository items.","etag":"AA==","includedPermissions":["artifactregistry.aptartifacts.create","artifactregistry.dockerimages.get","artifactregistry.dockerimages.list","artifactregistry.files.get","artifactregistry.files.list","artifactregistry.locations.get","artifactregistry.locations.list","artifactregistry.mavenartifacts.get","artifactregistry.mavenartifacts.list","artifactregistry.npmpackages.get","artifactregistry.npmpackages.list","artifactregistry.packages.get","artifactregistry.packages.list","artifactregistry.pythonpackages.get","artifactregistry.pythonpackages.list","artifactregistry.repositories.downloadArtifacts","artifactregistry.repositories.get","artifactregistry.repositories.list","artifactregistry.repositories.listEffectiveTags","artifactregistry.repositories.listTagBindings","artifactregistry.repositories.uploadArtifacts","artifactregistry.tags.create","artifactregistry.tags.get","artifactregistry.tags.list","artifactregistry.tags.update","artifactregistry.versions.get","artifactregistry.versions.list","artifactregistry.yumartifacts.create"],"name":"roles/artifactregistry.writer","stage":"GA","title":"Artifact Registry Writer","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Grants full access to Assured Workloads resources, CRM resources - project/folder and Organization Policy administration","etag":"AA==","includedPermissions":["assuredworkloads.operations.get","assuredworkloads.operations.list","assuredworkloads.violations.get","assuredworkloads.violations.list","assuredworkloads.violations.update","assuredworkloads.workload.create","assuredworkloads.workload.delete","assuredworkloads.workload.get","assuredworkloads.workload.list","assuredworkloads.workload.update","logging.cmekSettings.update","orgpolicy.policy.get","orgpolicy.policy.set","resourcemanager.folders.create","resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.create","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/assuredworkloads.admin","stage":"GA","title":"Assured Workloads Administrator","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Grants read, write access to Assured Workloads resources, CRM resources - project/folder and Organization Policy administration","etag":"AA==","includedPermissions":["assuredworkloads.operations.get","assuredworkloads.operations.list","assuredworkloads.violations.get","assuredworkloads.violations.list","assuredworkloads.violations.update","assuredworkloads.workload.create","assuredworkloads.workload.delete","assuredworkloads.workload.get","assuredworkloads.workload.list","assuredworkloads.workload.update","orgpolicy.policy.get","orgpolicy.policy.set","resourcemanager.folders.create","resourcemanager.folders.get","resourcemanager.folders.list","resourcemanager.organizations.get","resourcemanager.projects.create","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/assuredworkloads.editor","stage":"GA","title":"Assured Workloads Editor","asset_type":"iam.googleapis.com/ExportedIAMRole"}

diff --git a/roles/artifactregistry.serviceAgent b/roles/artifactregistry.serviceAgent
@@ -3,6 +3,7 @@
   "etag": "AA==",
   "includedPermissions": [
     "artifactregistry.repositories.downloadArtifacts",
+    "artifactregistry.versions.delete",
     "pubsub.topics.publish"
   ],
   "name": "roles/artifactregistry.serviceAgent",

diff --git a/roles/commercepricemanagement.readOnlyAdminUser b/roles/commercepricemanagement.readOnlyAdminUser
diff --git a/roles/container.nodeServiceAccount b/roles/container.nodeServiceAccount