Skip to content

Commit

Permalink
Merge pull request #79117 from mletalie/OSDOCS-11388
Browse files Browse the repository at this point in the history
[OSDOCS-11388]:Remove "Permissions" section from OSD docs.
  • Loading branch information
michaelryanpeter authored Jul 23, 2024
2 parents bf5529e + ef4889f commit cf0f6bd
Showing 1 changed file with 19 additions and 18 deletions.
37 changes: 19 additions & 18 deletions modules/ccs-gcp-provisioned.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -60,21 +60,22 @@ The following services must be enabled on a GCP CCS cluster:
* `orgpolicy`
* `networksecurity`

[id="gcp-policy-permissions_{context}"]
== Permissions

The following roles must be added to the support service account:

* `compute.admin`
* `dns.admin`
* `orgpolicy.policyViewer`
* `servicemanagement.admin`
* `serviceusage.serviceUsageAdmin`
* `storage.admin`
* `compute.loadBalancerAdmin`
* `viewer`
* `iam.roleAdmin`
* `iam.securityAdmin`
* `iam.serviceAccountKeyAdmin`
* `iam.serviceAccountAdmin`
* `iam.serviceAccountUser`
//Commenting this section out for now. Once Workload Identity feature is implemented, this may need to be conditionalized for that, but does not apply to service account key authorization method.
// [id="gcp-policy-permissions_{context}"]
// == Permissions

// The following roles must be added to the support service account:

// * `compute.admin`
// * `dns.admin`
// * `orgpolicy.policyViewer`
// * `servicemanagement.admin`
// * `serviceusage.serviceUsageAdmin`
// * `storage.admin`
// * `compute.loadBalancerAdmin`
// * `viewer`
// * `iam.roleAdmin`
// * `iam.securityAdmin`
// * `iam.serviceAccountKeyAdmin`
// * `iam.serviceAccountAdmin`
// * `iam.serviceAccountUser`

0 comments on commit cf0f6bd

Please sign in to comment.