Merge pull request #844 from Miciah/CCO-249-replace-GCP-role-with-exp…

…licit-permissions CCO-249: Replace GCP role with explicit permissions
openshift · Jan 8, 2024 · fa2954d · fa2954d
2 parents d09611e + a236822
commit fa2954d
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/manifests/00-ingress-credentials-request.yaml b/manifests/00-ingress-credentials-request.yaml
@@ -78,8 +78,12 @@ spec:
   providerSpec:
     apiVersion: cloudcredential.openshift.io/v1
     kind: GCPProviderSpec
-    predefinedRoles:
-    - roles/dns.admin
+    permissions:
+    - dns.changes.create
+    - dns.resourceRecordSets.create
+    - dns.resourceRecordSets.update
+    - dns.resourceRecordSets.delete
+    - dns.resourceRecordSets.list
 ---
 apiVersion: cloudcredential.openshift.io/v1
 kind: CredentialsRequest