Escopo
project
Permissões
2
Role ID
roles/gkehub.crossProjectServiceAgentEsta é uma role privilegiada — concede capacidades de controle elevado. Aplique o princípio do menor privilégio e monitore atribuições via Cloud Audit Logs.
Admin
Administrative control over a service, may include IAM
Descrição
Gives the GKE Hub service agent permission to manage the project for cross-project fleet registration.
Permissions(2)
Carregando permissões…
Role Definition (JSON)
{
"name": "roles/gkehub.crossProjectServiceAgent",
"title": "GKE Hub Cross Project Service Agent",
"description": "Gives the GKE Hub service agent permission to manage the project for cross-project fleet registration.",
"stage": "GA",
"includedPermissions": []
}Roles relacionadasKubernetes
Kubernetes Engine Admin
Provides access to full management of clusters and their Kubernetes API objects. To set a service account on nodes, you must also have the Service Account User role (roles/iam.serviceAccountUser) on the user-managed service account that your nodes will use.
Kubernetes Engine KMS Crypto Key User
Allow the Kubernetes Engine service agent in the cluster project to call KMS with user provided crypto keys to sign payloads.
Kubernetes Engine Cluster Admin
Provides access to management of clusters. To set a service account on nodes, you must also have the Service Account User role (roles/iam.serviceAccountUser) on the user-managed service account that your nodes will use.
Kubernetes Engine Cluster Viewer
Provides access to get and list GKE clusters.
Kubernetes Engine Default Node Service Account
Least privilege role to use as the default service account for GKE Nodes.