Fetch all roles

darkbitio · Aug 29, 2024 · cd844dc · cd844dc
1 parent eaaf6e2
commit cd844dc
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 13 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
@@ -752,7 +752,7 @@
 {"description":"Viewer of all Earth Engine resources","etag":"AA==","includedPermissions":["earthengine.assets.get","earthengine.assets.getIamPolicy","earthengine.assets.list","earthengine.computations.create","earthengine.config.get","earthengine.filmstripthumbnails.get","earthengine.maps.get","earthengine.operations.get","earthengine.operations.list","earthengine.tables.get","earthengine.thumbnails.get","earthengine.videothumbnails.get","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/earthengine.viewer","stage":"BETA","title":"Earth Engine Resource Viewer","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Writer of all Earth Engine resources","etag":"AA==","includedPermissions":["earthengine.assets.create","earthengine.assets.delete","earthengine.assets.get","earthengine.assets.getIamPolicy","earthengine.assets.list","earthengine.assets.update","earthengine.computations.create","earthengine.config.get","earthengine.config.update","earthengine.exports.create","earthengine.featureviews.create","earthengine.filmstripthumbnails.create","earthengine.filmstripthumbnails.get","earthengine.imports.create","earthengine.maps.create","earthengine.maps.get","earthengine.operations.delete","earthengine.operations.get","earthengine.operations.list","earthengine.operations.update","earthengine.tables.create","earthengine.tables.get","earthengine.thumbnails.create","earthengine.thumbnails.get","earthengine.videothumbnails.create","earthengine.videothumbnails.get","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/earthengine.writer","stage":"BETA","title":"Earth Engine Resource Writer","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Full access to Edge Container all resources.","etag":"AA==","includedPermissions":["edgecontainer.clusters.create","edgecontainer.clusters.delete","edgecontainer.clusters.generateAccessToken","edgecontainer.clusters.generateOfflineCredential","edgecontainer.clusters.get","edgecontainer.clusters.getIamPolicy","edgecontainer.clusters.list","edgecontainer.clusters.setIamPolicy","edgecontainer.clusters.update","edgecontainer.clusters.upgrade","edgecontainer.locations.get","edgecontainer.locations.list","edgecontainer.machines.create","edgecontainer.machines.delete","edgecontainer.machines.get","edgecontainer.machines.getIamPolicy","edgecontainer.machines.list","edgecontainer.machines.setIamPolicy","edgecontainer.machines.update","edgecontainer.machines.use","edgecontainer.nodePools.create","edgecontainer.nodePools.delete","edgecontainer.nodePools.get","edgecontainer.nodePools.getIamPolicy","edgecontainer.nodePools.list","edgecontainer.nodePools.setIamPolicy","edgecontainer.nodePools.update","edgecontainer.operations.cancel","edgecontainer.operations.delete","edgecontainer.operations.get","edgecontainer.operations.list","edgecontainer.serverconfig.get","edgecontainer.vpnConnections.create","edgecontainer.vpnConnections.delete","edgecontainer.vpnConnections.get","edgecontainer.vpnConnections.getIamPolicy","edgecontainer.vpnConnections.list","edgecontainer.vpnConnections.setIamPolicy","edgecontainer.vpnConnections.update","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/edgecontainer.admin","stage":"GA","title":"Edge Container Admin","asset_type":"iam.googleapis.com/ExportedIAMRole"}
-{"description":"Grants the Edge Container Cluster Service Account access to manage resources.","etag":"AA==","includedPermissions":["cloudnotifications.activities.list","gkehub.endpoints.connect","gkehub.features.create","gkehub.features.get","gkehub.features.list","gkehub.features.update","gkehub.fleet.create","gkehub.fleet.delete","gkehub.fleet.get","gkehub.locations.get","gkehub.locations.list","gkehub.memberships.create","gkehub.memberships.delete","gkehub.memberships.generateConnectManifest","gkehub.memberships.get","gkehub.memberships.list","gkehub.memberships.update","gkehub.operations.cancel","gkehub.operations.delete","gkehub.operations.get","gkehub.operations.list","kubernetesmetadata.metadata.config","kubernetesmetadata.metadata.publish","kubernetesmetadata.metadata.snapshot","logging.logEntries.create","monitoring.alertPolicies.get","monitoring.alertPolicies.list","monitoring.dashboards.create","monitoring.dashboards.delete","monitoring.dashboards.get","monitoring.dashboards.list","monitoring.dashboards.update","monitoring.groups.get","monitoring.groups.list","monitoring.metricDescriptors.create","monitoring.metricDescriptors.get","monitoring.metricDescriptors.list","monitoring.monitoredResourceDescriptors.get","monitoring.monitoredResourceDescriptors.list","monitoring.notificationChannelDescriptors.get","monitoring.notificationChannelDescriptors.list","monitoring.notificationChannels.get","monitoring.notificationChannels.list","monitoring.publicWidgets.get","monitoring.publicWidgets.list","monitoring.services.get","monitoring.services.list","monitoring.slos.get","monitoring.slos.list","monitoring.snoozes.get","monitoring.snoozes.list","monitoring.timeSeries.create","monitoring.timeSeries.list","monitoring.uptimeCheckConfigs.get","monitoring.uptimeCheckConfigs.list","opsconfigmonitoring.resourceMetadata.list","opsconfigmonitoring.resourceMetadata.write","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list","stackdriver.projects.get","stackdriver.resourceMetadata.list","stackdriver.resourceMetadata.write","storage.buckets.create","storage.buckets.get","storage.buckets.list","storage.buckets.update","storage.objects.create","storage.objects.delete","storage.objects.get","storage.objects.list","storage.objects.update"],"name":"roles/edgecontainer.clusterServiceAgent","stage":"GA","title":"Edge Container Cluster Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
+{"description":"Grants the Edge Container Cluster Service Account access to manage resources.","etag":"AA==","includedPermissions":["gkehub.endpoints.connect","gkehub.features.create","gkehub.features.get","gkehub.features.list","gkehub.features.update","gkehub.fleet.create","gkehub.fleet.delete","gkehub.fleet.get","gkehub.locations.get","gkehub.locations.list","gkehub.memberships.create","gkehub.memberships.delete","gkehub.memberships.generateConnectManifest","gkehub.memberships.get","gkehub.memberships.list","gkehub.memberships.update","gkehub.operations.cancel","gkehub.operations.delete","gkehub.operations.get","gkehub.operations.list","logging.logEntries.create","monitoring.dashboards.create","monitoring.dashboards.delete","monitoring.dashboards.get","monitoring.dashboards.list","monitoring.dashboards.update","monitoring.metricDescriptors.create","monitoring.metricDescriptors.get","monitoring.metricDescriptors.list","monitoring.monitoredResourceDescriptors.get","monitoring.monitoredResourceDescriptors.list","monitoring.notificationChannelDescriptors.get","monitoring.notificationChannelDescriptors.list","monitoring.notificationChannels.get","monitoring.notificationChannels.list","monitoring.publicWidgets.get","monitoring.publicWidgets.list","monitoring.services.get","monitoring.services.list","monitoring.slos.get","monitoring.slos.list","monitoring.snoozes.get","monitoring.snoozes.list","monitoring.timeSeries.create","monitoring.timeSeries.list","monitoring.uptimeCheckConfigs.get","opsconfigmonitoring.resourceMetadata.write","resourcemanager.projects.get","resourcemanager.projects.list","serviceusage.quotas.get","serviceusage.services.get","serviceusage.services.list","stackdriver.resourceMetadata.write","storage.buckets.create","storage.buckets.get","storage.buckets.list","storage.buckets.update","storage.objects.create","storage.objects.delete","storage.objects.get","storage.objects.list","storage.objects.update"],"name":"roles/edgecontainer.clusterServiceAgent","stage":"GA","title":"Edge Container Cluster Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Access to use Edge Container Machine resources.","etag":"AA==","includedPermissions":["edgecontainer.machines.get","edgecontainer.machines.getIamPolicy","edgecontainer.machines.list","edgecontainer.machines.use","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/edgecontainer.machineUser","stage":"GA","title":"Edge Container Machine User","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Access to get Edge Container cluster offline credentials","etag":"AA==","includedPermissions":["edgecontainer.clusters.generateOfflineCredential","resourcemanager.projects.get","resourcemanager.projects.list"],"name":"roles/edgecontainer.offlineCredentialUser","stage":"GA","title":"Edge Container Cluster offline Credential User","asset_type":"iam.googleapis.com/ExportedIAMRole"}
 {"description":"Grants the Edge Container Service Account access to manage resources.","etag":"AA==","includedPermissions":["compute.externalVpnGateways.create","compute.externalVpnGateways.delete","compute.externalVpnGateways.get","compute.externalVpnGateways.use","compute.globalOperations.get","compute.networks.get","compute.networks.updatePolicy","compute.regionOperations.get","compute.routers.create","compute.routers.delete","compute.routers.get","compute.routers.list","compute.routers.update","compute.routers.use","compute.vpnGateways.create","compute.vpnGateways.delete","compute.vpnGateways.get","compute.vpnGateways.use","compute.vpnTunnels.create","compute.vpnTunnels.delete","compute.vpnTunnels.get","gkehub.memberships.create","gkehub.memberships.delete","gkehub.memberships.generateConnectManifest","gkehub.memberships.get","gkehub.memberships.update","gkehub.operations.cancel","gkehub.operations.get","serviceusage.services.list"],"name":"roles/edgecontainer.serviceAgent","stage":"GA","title":"Edge Container Service Agent","asset_type":"iam.googleapis.com/ExportedIAMRole"}

diff --git a/roles/edgecontainer.clusterServiceAgent b/roles/edgecontainer.clusterServiceAgent
@@ -2,7 +2,6 @@
   "description": "Grants the Edge Container Cluster Service Account access to manage resources.",
   "etag": "AA==",
   "includedPermissions": [
-    "cloudnotifications.activities.list",
     "gkehub.endpoints.connect",
     "gkehub.features.create",
     "gkehub.features.get",
@@ -23,19 +22,12 @@
     "gkehub.operations.delete",
     "gkehub.operations.get",
     "gkehub.operations.list",
-    "kubernetesmetadata.metadata.config",
-    "kubernetesmetadata.metadata.publish",
-    "kubernetesmetadata.metadata.snapshot",
     "logging.logEntries.create",
-    "monitoring.alertPolicies.get",
-    "monitoring.alertPolicies.list",
     "monitoring.dashboards.create",
     "monitoring.dashboards.delete",
     "monitoring.dashboards.get",
     "monitoring.dashboards.list",
     "monitoring.dashboards.update",
-    "monitoring.groups.get",
-    "monitoring.groups.list",
     "monitoring.metricDescriptors.create",
     "monitoring.metricDescriptors.get",
     "monitoring.metricDescriptors.list",
@@ -56,16 +48,12 @@
     "monitoring.timeSeries.create",
     "monitoring.timeSeries.list",
     "monitoring.uptimeCheckConfigs.get",
-    "monitoring.uptimeCheckConfigs.list",
-    "opsconfigmonitoring.resourceMetadata.list",
     "opsconfigmonitoring.resourceMetadata.write",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "serviceusage.quotas.get",
     "serviceusage.services.get",
     "serviceusage.services.list",
-    "stackdriver.projects.get",
-    "stackdriver.resourceMetadata.list",
     "stackdriver.resourceMetadata.write",
     "storage.buckets.create",
     "storage.buckets.get",