Merge pull request #2069 from kyrtapz/gcp_cncc_permissions

SDN-4227: Use specific permissions for CNCC in GCP
openshift · Jan 8, 2024 · 873b329 · 873b329
2 parents e23d612 + 353e4d6
commit 873b329
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/manifests/02-cncc-credentials.yaml b/manifests/02-cncc-credentials.yaml
@@ -22,8 +22,12 @@ spec:
   providerSpec:
     apiVersion: cloudcredential.openshift.io/v1
     kind: GCPProviderSpec
-    predefinedRoles:
-    - roles/compute.admin 
+    permissions:
+      - compute.instances.updateNetworkInterface
+      - compute.subnetworks.use
+      - compute.subnetworks.get
+      - compute.zoneOperations.get
+      - compute.instances.get
 ---
 apiVersion: cloudcredential.openshift.io/v1
 kind: CredentialsRequest