Fetch all roles

darkbitio · Aug 23, 2022 · b1d3d2a · b1d3d2a
1 parent 20c0103
commit b1d3d2a
Show file tree

Hide file tree

Showing 31 changed files with 33 additions and 238 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/appengine.memcacheDataAdmin b/roles/appengine.memcacheDataAdmin
diff --git a/roles/cloudsql.admin b/roles/cloudsql.admin
@@ -65,12 +65,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/cloudsql.editor b/roles/cloudsql.editor
@@ -44,12 +44,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -1027,10 +1027,6 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -1263,12 +1259,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/containerthreatdetection.serviceAgent b/roles/containerthreatdetection.serviceAgent
@@ -22,6 +22,7 @@
     "container.clusterRoles.bind",
     "container.clusterRoles.create",
     "container.clusterRoles.delete",
+    "container.clusterRoles.escalate",
     "container.clusterRoles.get",
     "container.clusterRoles.list",
     "container.clusterRoles.update",
@@ -42,9 +43,12 @@
     "container.csiNodeInfos.list",
     "container.csiNodes.get",
     "container.csiNodes.list",
+    "container.customResourceDefinitions.create",
+    "container.customResourceDefinitions.delete",
     "container.customResourceDefinitions.get",
     "container.customResourceDefinitions.getStatus",
     "container.customResourceDefinitions.list",
+    "container.customResourceDefinitions.update",
     "container.daemonSets.create",
     "container.daemonSets.delete",
     "container.daemonSets.get",
@@ -139,8 +143,13 @@
     "container.roleBindings.get",
     "container.roleBindings.list",
     "container.roleBindings.update",
+    "container.roles.bind",
+    "container.roles.create",
+    "container.roles.delete",
+    "container.roles.escalate",
     "container.roles.get",
     "container.roles.list",
+    "container.roles.update",
     "container.runtimeClasses.get",
     "container.runtimeClasses.list",
     "container.scheduledJobs.get",

diff --git a/roles/dataflow.serviceAgent b/roles/dataflow.serviceAgent
@@ -636,10 +636,6 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/dataproc.hubAgent b/roles/dataproc.hubAgent
@@ -26,8 +26,6 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/editor b/roles/editor
@@ -3473,13 +3473,6 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
-    "firebasemessagingcampaigns.campaigns.create",
-    "firebasemessagingcampaigns.campaigns.delete",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.start",
-    "firebasemessagingcampaigns.campaigns.stop",
-    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",
@@ -4013,10 +4006,6 @@
     "logging.cmekSettings.update",
     "logging.exclusions.get",
     "logging.exclusions.list",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -4684,12 +4673,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/firebase.admin b/roles/firebase.admin
@@ -285,13 +285,6 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
-    "firebasemessagingcampaigns.campaigns.create",
-    "firebasemessagingcampaigns.campaigns.delete",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.start",
-    "firebasemessagingcampaigns.campaigns.stop",
-    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",

diff --git a/roles/firebase.growthAdmin b/roles/firebase.growthAdmin
@@ -43,13 +43,6 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
-    "firebasemessagingcampaigns.campaigns.create",
-    "firebasemessagingcampaigns.campaigns.delete",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.start",
-    "firebasemessagingcampaigns.campaigns.stop",
-    "firebasemessagingcampaigns.campaigns.update",
     "firebasenotifications.messages.create",
     "firebasenotifications.messages.delete",
     "firebasenotifications.messages.get",

diff --git a/roles/firebase.growthViewer b/roles/firebase.growthViewer
@@ -26,8 +26,6 @@
     "firebaseextensions.configs.list",
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
     "firebasenotifications.messages.get",
     "firebasenotifications.messages.list",
     "monitoring.timeSeries.list",

diff --git a/roles/firebase.viewer b/roles/firebase.viewer
@@ -121,8 +121,6 @@
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.get",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.get",

diff --git a/roles/firebasemessagingcampaigns.admin b/roles/firebasemessagingcampaigns.admin
diff --git a/roles/firebasemessagingcampaigns.viewer b/roles/firebasemessagingcampaigns.viewer
diff --git a/roles/iam.securityAdmin b/roles/iam.securityAdmin
@@ -868,7 +868,6 @@
     "firebaseextensions.configs.list",
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.list",
     "firebaseml.modelversions.list",
@@ -1032,7 +1031,6 @@
     "livestream.operations.list",
     "logging.buckets.list",
     "logging.exclusions.list",
-    "logging.links.list",
     "logging.locations.list",
     "logging.logEntries.list",
     "logging.logMetrics.list",
@@ -1255,8 +1253,6 @@
     "recommender.cloudsqlInstanceDiskUsageTrendInsights.list",
     "recommender.cloudsqlInstanceMemoryUsageInsights.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.commitmentUtilizationInsights.list",
     "recommender.computeAddressIdleResourceInsights.list",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -750,7 +750,6 @@
     "firebaseextensions.configs.list",
     "firebasehosting.sites.list",
     "firebaseinappmessaging.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.list",
     "firebaseml.compressionjobs.list",
     "firebaseml.models.list",
     "firebaseml.modelversions.list",
@@ -885,7 +884,6 @@
     "livestream.operations.list",
     "logging.buckets.list",
     "logging.exclusions.list",
-    "logging.links.list",
     "logging.locations.list",
     "logging.logEntries.list",
     "logging.logMetrics.list",
@@ -1064,8 +1062,6 @@
     "recommender.cloudsqlInstanceDiskUsageTrendInsights.list",
     "recommender.cloudsqlInstanceMemoryUsageInsights.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.commitmentUtilizationInsights.list",
     "recommender.computeAddressIdleResourceInsights.list",

diff --git a/roles/iam.serviceAccountOpenIdTokenCreator b/roles/iam.serviceAccountOpenIdTokenCreator
diff --git a/roles/logging.admin b/roles/logging.admin
@@ -17,10 +17,6 @@
     "logging.exclusions.list",
     "logging.exclusions.update",
     "logging.fields.access",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",

diff --git a/roles/logging.configWriter b/roles/logging.configWriter
@@ -15,10 +15,6 @@
     "logging.exclusions.get",
     "logging.exclusions.list",
     "logging.exclusions.update",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logMetrics.create",

diff --git a/roles/logging.linkViewer b/roles/logging.linkViewer
diff --git a/roles/logging.privateLogViewer b/roles/logging.privateLogViewer
@@ -6,8 +6,6 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",

diff --git a/roles/logging.viewer b/roles/logging.viewer
@@ -6,8 +6,6 @@
     "logging.buckets.list",
     "logging.exclusions.get",
     "logging.exclusions.list",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.list",

diff --git a/roles/owner b/roles/owner
@@ -3762,13 +3762,6 @@
     "firebaseinappmessaging.campaigns.get",
     "firebaseinappmessaging.campaigns.list",
     "firebaseinappmessaging.campaigns.update",
-    "firebasemessagingcampaigns.campaigns.create",
-    "firebasemessagingcampaigns.campaigns.delete",
-    "firebasemessagingcampaigns.campaigns.get",
-    "firebasemessagingcampaigns.campaigns.list",
-    "firebasemessagingcampaigns.campaigns.start",
-    "firebasemessagingcampaigns.campaigns.stop",
-    "firebasemessagingcampaigns.campaigns.update",
     "firebaseml.compressionjobs.create",
     "firebaseml.compressionjobs.delete",
     "firebaseml.compressionjobs.get",
@@ -4377,10 +4370,6 @@
     "logging.exclusions.list",
     "logging.exclusions.update",
     "logging.fields.access",
-    "logging.links.create",
-    "logging.links.delete",
-    "logging.links.get",
-    "logging.links.list",
     "logging.locations.get",
     "logging.locations.list",
     "logging.logEntries.create",
@@ -5107,12 +5096,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",

diff --git a/roles/recommender.cloudsqlAdmin b/roles/recommender.cloudsqlAdmin
@@ -20,12 +20,6 @@
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.get",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.list",
     "recommender.cloudsqlInstanceOutOfDiskRecommendations.update",
-    "recommender.cloudsqlInstancePerformanceInsights.get",
-    "recommender.cloudsqlInstancePerformanceInsights.list",
-    "recommender.cloudsqlInstancePerformanceInsights.update",
-    "recommender.cloudsqlInstancePerformanceRecommendations.get",
-    "recommender.cloudsqlInstancePerformanceRecommendations.list",
-    "recommender.cloudsqlInstancePerformanceRecommendations.update",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.get",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.list",
     "recommender.cloudsqlOverprovisionedInstanceRecommendations.update",