Skip to content

Commit

Permalink
docs: Update required-permissions.md (#2583) (#2584)
Browse files Browse the repository at this point in the history 
* Update required-permissions.md

Added extra IAM permissions and API's

* Fix spelling

* docs: minor order change

---------

Co-authored-by: Karl Cardenas <karl@spectrocloud.com>
(cherry picked from commit b3deb55)

Co-authored-by: Sheldon Lo-A-Njoe <6817520+Sheldonwl@users.noreply.github.com>
  • Loading branch information
@vault-token-factory-spectrocloud @Sheldonwl
vault-token-factory-spectrocloud[bot] and Sheldonwl authored Apr 4, 2024
1 parent d0dc0bb commit a7acf4e
Showing 1 changed file with 28 additions and 0 deletions.
28 changes: 28 additions & 0 deletions docs/docs-content/clusters/public-cloud/gcp/required-permissions.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,24 @@ sidebar_position: 40
tags: ["public cloud", "gcp", "iam"]
---

## Required API Services

Ensure the following Google Cloud Platform (GCP) API services are enabled in your GCP project to deploy a host cluster:

- [Cloud Resource Manager API](https://cloud.google.com/resource-manager/reference/rest)
- [Compute Engine API](https://cloud.google.com/compute/docs/reference/rest/v1)
- [Kubernetes Engine API](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1)

:::tip

If you need help enabling a Google Cloud API service, check out the
[Enable and disable APIs](https://support.google.com/googleapi/answer/6158841?hl=en) guide from the official Google
Cloud documentation.

:::

## Required Permissions

This table contains the required Google Cloud Platform (GCP) permissions to create a custom GCP role tailored for usage
with Palette. When creating a custom role, ensure you include all the permissions listed below to prevent Palette from
having issues when deploying a host cluster.
Expand Down Expand Up @@ -66,6 +84,16 @@ having issues when deploying a host cluster.
| `compute.routes.delete` | Delete routes |
| `compute.routes.get` | Get route information |
| `compute.routes.list` | List routes |
| `compute.subnetworks.create` | Create subnetwork |
| `compute.subnetworks.delete` | Delete subnetwork |
| `compute.subnetworks.list` | List subnetworks |
| `compute.subnetworks.use` | Use subnetwork |
| `compute.zones.list` | List zones |
| `container.clusters.create` | Create cluster |
| `container.clusters.delete` | Delete cluster |
| `container.clusters.get` | Get clusters |
| `container.clusters.list` | List clusters |
| `container.clusters.update` | Update cluster |
| `resourcemanager.projects.get` | Get details of a specified Google Cloud project. |
| `resourcemanager.projects.list` | List all Google Cloud projects that the user has access to. |
| `storage.objects.get` | Get details of a specified object in Google Cloud Storage. |
Expand Down

0 comments on commit a7acf4e

Please sign in to comment.