Fetch all roles

darkbitio · Aug 28, 2024 · d768eaa · d768eaa
1 parent e9f7658
commit d768eaa
Show file tree

Hide file tree

Showing 7 changed files with 32 additions and 65 deletions.
diff --git a/gcp_roles_cai.json b/gcp_roles_cai.json
diff --git a/roles/bigquerydatapolicy.rawDataReader b/roles/bigquerydatapolicy.rawDataReader
diff --git a/roles/edgecontainer.clusterServiceAgent b/roles/edgecontainer.clusterServiceAgent
@@ -2,6 +2,7 @@
   "description": "Grants the Edge Container Cluster Service Account access to manage resources.",
   "etag": "AA==",
   "includedPermissions": [
+    "cloudnotifications.activities.list",
     "gkehub.endpoints.connect",
     "gkehub.features.create",
     "gkehub.features.get",
@@ -22,12 +23,19 @@
     "gkehub.operations.delete",
     "gkehub.operations.get",
     "gkehub.operations.list",
+    "kubernetesmetadata.metadata.config",
+    "kubernetesmetadata.metadata.publish",
+    "kubernetesmetadata.metadata.snapshot",
     "logging.logEntries.create",
+    "monitoring.alertPolicies.get",
+    "monitoring.alertPolicies.list",
     "monitoring.dashboards.create",
     "monitoring.dashboards.delete",
     "monitoring.dashboards.get",
     "monitoring.dashboards.list",
     "monitoring.dashboards.update",
+    "monitoring.groups.get",
+    "monitoring.groups.list",
     "monitoring.metricDescriptors.create",
     "monitoring.metricDescriptors.get",
     "monitoring.metricDescriptors.list",
@@ -48,12 +56,16 @@
     "monitoring.timeSeries.create",
     "monitoring.timeSeries.list",
     "monitoring.uptimeCheckConfigs.get",
+    "monitoring.uptimeCheckConfigs.list",
+    "opsconfigmonitoring.resourceMetadata.list",
     "opsconfigmonitoring.resourceMetadata.write",
     "resourcemanager.projects.get",
     "resourcemanager.projects.list",
     "serviceusage.quotas.get",
     "serviceusage.services.get",
     "serviceusage.services.list",
+    "stackdriver.projects.get",
+    "stackdriver.resourceMetadata.list",
     "stackdriver.resourceMetadata.write",
     "storage.buckets.create",
     "storage.buckets.get",

diff --git a/roles/managedflink.serviceAgent b/roles/managedflink.serviceAgent
diff --git a/roles/remotingcloud.serviceAgent b/roles/remotingcloud.serviceAgent
diff --git a/roles/securesourcemanager.repoPullRequestApprover b/roles/securesourcemanager.repoPullRequestApprover
diff --git a/roles/workloadmanager.evaluationWorker b/roles/workloadmanager.evaluationWorker
@@ -0,0 +1,18 @@
+{
+  "description": "The role used by Workload Manager application runners to read and update workloads.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "workloadmanager.evaluations.create",
+    "workloadmanager.evaluations.delete",
+    "workloadmanager.evaluations.get",
+    "workloadmanager.evaluations.list",
+    "workloadmanager.evaluations.run",
+    "workloadmanager.evaluations.update",
+    "workloadmanager.executions.delete",
+    "workloadmanager.executions.get",
+    "workloadmanager.executions.list"
+  ],
+  "name": "roles/workloadmanager.evaluationWorker",
+  "stage": "BETA",
+  "title": "Workload Manager Evaluation Worker"
+}