GCP IAM Updates Detected

jdyke · Dec 1, 2023 · 8fcb5f5 · 8fcb5f5
1 parent b119adf
commit 8fcb5f5
Show file tree

Hide file tree

Showing 7 changed files with 43 additions and 0 deletions.
diff --git a/roles/cloudtpu.serviceAgent b/roles/cloudtpu.serviceAgent
@@ -714,6 +714,10 @@
     "networkconnectivity.policyBasedRoutes.getIamPolicy",
     "networkconnectivity.policyBasedRoutes.list",
     "networkconnectivity.policyBasedRoutes.setIamPolicy",
+    "networkconnectivity.regionalEndpoints.create",
+    "networkconnectivity.regionalEndpoints.delete",
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
     "networkconnectivity.serviceClasses.create",
     "networkconnectivity.serviceClasses.delete",
     "networkconnectivity.serviceClasses.get",

diff --git a/roles/composer.serviceAgent b/roles/composer.serviceAgent
@@ -1304,6 +1304,10 @@
     "networkconnectivity.policyBasedRoutes.getIamPolicy",
     "networkconnectivity.policyBasedRoutes.list",
     "networkconnectivity.policyBasedRoutes.setIamPolicy",
+    "networkconnectivity.regionalEndpoints.create",
+    "networkconnectivity.regionalEndpoints.delete",
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
     "networkconnectivity.serviceClasses.create",
     "networkconnectivity.serviceClasses.delete",
     "networkconnectivity.serviceClasses.get",

diff --git a/roles/iam.securityReviewer b/roles/iam.securityReviewer
@@ -1224,6 +1224,7 @@
     "networkconnectivity.operations.list",
     "networkconnectivity.policyBasedRoutes.getIamPolicy",
     "networkconnectivity.policyBasedRoutes.list",
+    "networkconnectivity.regionalEndpoints.list",
     "networkconnectivity.serviceClasses.list",
     "networkconnectivity.serviceConnectionMaps.list",
     "networkconnectivity.serviceConnectionPolicies.list",

diff --git a/roles/networkconnectivity.regionalEndpointAdmin b/roles/networkconnectivity.regionalEndpointAdmin
@@ -0,0 +1,15 @@
+{
+  "description": "Full access to all Regional Endpoint resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "networkconnectivity.regionalEndpoints.create",
+    "networkconnectivity.regionalEndpoints.delete",
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networkconnectivity.regionalEndpointAdmin",
+  "stage": "ALPHA",
+  "title": "Regional Endpoint Admin"
+}
diff --git a/roles/networkconnectivity.regionalEndpointViewer b/roles/networkconnectivity.regionalEndpointViewer
@@ -0,0 +1,13 @@
+{
+  "description": "Read-only access to all Regional Endpoint resources.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networkconnectivity.regionalEndpointViewer",
+  "stage": "ALPHA",
+  "title": "Regional Endpoint Viewer"
+}
diff --git a/roles/owner b/roles/owner
@@ -6709,6 +6709,10 @@
     "networkconnectivity.policyBasedRoutes.getIamPolicy",
     "networkconnectivity.policyBasedRoutes.list",
     "networkconnectivity.policyBasedRoutes.setIamPolicy",
+    "networkconnectivity.regionalEndpoints.create",
+    "networkconnectivity.regionalEndpoints.delete",
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
     "networkconnectivity.serviceClasses.create",
     "networkconnectivity.serviceClasses.delete",
     "networkconnectivity.serviceClasses.get",

diff --git a/roles/viewer b/roles/viewer
@@ -2777,6 +2777,8 @@
     "networkconnectivity.policyBasedRoutes.get",
     "networkconnectivity.policyBasedRoutes.getIamPolicy",
     "networkconnectivity.policyBasedRoutes.list",
+    "networkconnectivity.regionalEndpoints.get",
+    "networkconnectivity.regionalEndpoints.list",
     "networkconnectivity.serviceClasses.get",
     "networkconnectivity.serviceClasses.list",
     "networkconnectivity.serviceConnectionMaps.get",