Skip to content

Commit 30a8bb6

Browse files
docs: Update required-permissions.md (#2583) (#2586)
* Update required-permissions.md Added extra IAM permissions and API's * Fix spelling * docs: minor order change --------- Co-authored-by: Karl Cardenas <[email protected]> (cherry picked from commit b3deb55) Co-authored-by: Sheldon Lo-A-Njoe <[email protected]>
1 parent 1475d5f commit 30a8bb6

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

docs/docs-content/clusters/public-cloud/gcp/required-permissions.md

+28
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,24 @@ sidebar_position: 40
77
tags: ["public cloud", "gcp", "iam"]
88
---
99

10+
## Required API Services
11+
12+
Ensure the following Google Cloud Platform (GCP) API services are enabled in your GCP project to deploy a host cluster:
13+
14+
- [Cloud Resource Manager API](https://cloud.google.com/resource-manager/reference/rest)
15+
- [Compute Engine API](https://cloud.google.com/compute/docs/reference/rest/v1)
16+
- [Kubernetes Engine API](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1)
17+
18+
:::tip
19+
20+
If you need help enabling a Google Cloud API service, check out the
21+
[Enable and disable APIs](https://support.google.com/googleapi/answer/6158841?hl=en) guide from the official Google
22+
Cloud documentation.
23+
24+
:::
25+
26+
## Required Permissions
27+
1028
This table contains the required Google Cloud Platform (GCP) permissions to create a custom GCP role tailored for usage
1129
with Palette. When creating a custom role, ensure you include all the permissions listed below to prevent Palette from
1230
having issues when deploying a host cluster.
@@ -66,6 +84,16 @@ having issues when deploying a host cluster.
6684
| `compute.routes.delete` | Delete routes |
6785
| `compute.routes.get` | Get route information |
6886
| `compute.routes.list` | List routes |
87+
| `compute.subnetworks.create` | Create subnetwork |
88+
| `compute.subnetworks.delete` | Delete subnetwork |
89+
| `compute.subnetworks.list` | List subnetworks |
90+
| `compute.subnetworks.use` | Use subnetwork |
91+
| `compute.zones.list` | List zones |
92+
| `container.clusters.create` | Create cluster |
93+
| `container.clusters.delete` | Delete cluster |
94+
| `container.clusters.get` | Get clusters |
95+
| `container.clusters.list` | List clusters |
96+
| `container.clusters.update` | Update cluster |
6997
| `resourcemanager.projects.get` | Get details of a specified Google Cloud project. |
7098
| `resourcemanager.projects.list` | List all Google Cloud projects that the user has access to. |
7199
| `storage.objects.get` | Get details of a specified object in Google Cloud Storage. |

0 commit comments

Comments
 (0)