| stage: "ALPHA" |
| title: "Role for LTM and KCS VMs" |
| description: "Permissions given to gce-xfstests LTM and KCS VMs" |
| includedPermissions: |
| - compute.addresses.get |
| - compute.addresses.list |
| - compute.addresses.use |
| - compute.addresses.useInternal |
| - compute.diskTypes.get |
| - compute.diskTypes.list |
| - compute.disks.create |
| - compute.disks.createSnapshot |
| - compute.disks.delete |
| - compute.disks.get |
| - compute.disks.list |
| - compute.disks.resize |
| - compute.disks.setLabels |
| - compute.disks.update |
| - compute.disks.use |
| - compute.disks.useReadOnly |
| - compute.forwardingRules.use |
| - compute.globalAddresses.use |
| - compute.healthChecks.get |
| - compute.healthChecks.use |
| - compute.healthChecks.useReadOnly |
| - compute.globalOperations.get |
| - compute.images.get |
| - compute.images.getFromFamily |
| - compute.images.list |
| - compute.images.useReadOnly |
| - compute.instances.addAccessConfig |
| - compute.instances.addMaintenancePolicies |
| - compute.instances.attachDisk |
| - compute.instances.create |
| - compute.instances.delete |
| - compute.instances.deleteAccessConfig |
| - compute.instances.detachDisk |
| - compute.instances.get |
| - compute.instances.getEffectiveFirewalls |
| - compute.instances.getGuestAttributes |
| - compute.instances.getIamPolicy |
| - compute.instances.getScreenshot |
| - compute.instances.getSerialPortOutput |
| - compute.instances.getShieldedInstanceIdentity |
| - compute.instances.getShieldedVmIdentity |
| - compute.instances.list |
| - compute.instances.listReferrers |
| - compute.instances.osAdminLogin |
| - compute.instances.osLogin |
| - compute.instances.removeMaintenancePolicies |
| - compute.instances.reset |
| - compute.instances.resume |
| - compute.instances.sendDiagnosticInterrupt |
| - compute.instances.setDeletionProtection |
| - compute.instances.setDiskAutoDelete |
| - compute.instances.setLabels |
| - compute.instances.setMachineResources |
| - compute.instances.setMachineType |
| - compute.instances.setMetadata |
| - compute.instances.setMinCpuPlatform |
| - compute.instances.setScheduling |
| - compute.instances.setServiceAccount |
| - compute.instances.setShieldedInstanceIntegrityPolicy |
| - compute.instances.setShieldedVmIntegrityPolicy |
| - compute.instances.setTags |
| - compute.instances.start |
| - compute.instances.startWithEncryptionKey |
| - compute.instances.stop |
| - compute.instances.suspend |
| - compute.instances.update |
| - compute.instances.updateAccessConfig |
| - compute.instances.updateDisplayDevice |
| - compute.instances.updateNetworkInterface |
| - compute.instances.updateSecurity |
| - compute.instances.updateShieldedInstanceConfig |
| - compute.instances.updateShieldedVmConfig |
| - compute.instances.use |
| - compute.instances.useReadOnly |
| - compute.licenseCodes.get |
| - compute.licenseCodes.list |
| - compute.licenseCodes.use |
| - compute.licenses.create |
| - compute.licenses.get |
| - compute.licenses.list |
| - compute.machineTypes.get |
| - compute.machineTypes.list |
| - compute.maintenancePolicies.get |
| - compute.maintenancePolicies.list |
| - compute.maintenancePolicies.use |
| - compute.networks.access |
| - compute.networks.addPeering |
| - compute.networks.create |
| - compute.networks.delete |
| - compute.networks.get |
| - compute.networks.getEffectiveFirewalls |
| - compute.networks.list |
| - compute.networks.listPeeringRoutes |
| - compute.networks.mirror |
| - compute.networks.removePeering |
| - compute.networks.switchToCustomMode |
| - compute.networks.update |
| - compute.networks.updatePeering |
| - compute.networks.updatePolicy |
| - compute.networks.use |
| - compute.networks.useExternalIp |
| - compute.nodeTypes.get |
| - compute.nodeTypes.list |
| - compute.packetMirrorings.update |
| - compute.projects.get |
| - compute.regions.get |
| - compute.regions.list |
| - compute.resourcePolicies.get |
| - compute.resourcePolicies.list |
| - compute.resourcePolicies.use |
| - compute.snapshots.create |
| - compute.snapshots.delete |
| - compute.snapshots.get |
| - compute.snapshots.getIamPolicy |
| - compute.snapshots.list |
| - compute.snapshots.useReadOnly |
| - compute.subnetworks.get |
| - compute.subnetworks.use |
| - compute.subnetworks.useExternalIp |
| - compute.zoneOperations.delete |
| - compute.zoneOperations.get |
| - compute.zoneOperations.getIamPolicy |
| - compute.zoneOperations.list |
| - compute.zones.get |
| - compute.zones.list |
| - iam.roles.get |
| - iam.roles.list |
| - iam.serviceAccounts.actAs |
| - iam.serviceAccounts.get |
| - iam.serviceAccounts.list |
| - logging.buckets.copyLogEntries |
| - logging.buckets.get |
| - logging.buckets.list |
| - logging.cmekSettings.get |
| - logging.cmekSettings.update |
| - logging.exclusions.get |
| - logging.exclusions.list |
| - logging.locations.get |
| - logging.locations.list |
| - logging.logEntries.create |
| - logging.logEntries.download |
| - logging.logEntries.list |
| - logging.logMetrics.create |
| - logging.logMetrics.delete |
| - logging.logMetrics.get |
| - logging.logMetrics.list |
| - logging.logMetrics.update |
| - logging.logServiceIndexes.list |
| - logging.logServices.list |
| - logging.logs.delete |
| - logging.logs.list |
| - logging.notificationRules.create |
| - logging.notificationRules.delete |
| - logging.notificationRules.get |
| - logging.notificationRules.list |
| - logging.notificationRules.update |
| - logging.operations.cancel |
| - logging.operations.get |
| - logging.operations.list |
| - logging.queries.create |
| - logging.queries.delete |
| - logging.queries.get |
| - logging.queries.list |
| - logging.queries.listShared |
| - logging.queries.update |
| - logging.sinks.get |
| - logging.sinks.list |
| - logging.usage.get |
| - logging.views.create |
| - logging.views.delete |
| - logging.views.get |
| - logging.views.list |
| - logging.views.listLogs |
| - logging.views.listResourceKeys |
| - logging.views.listResourceValues |
| - logging.views.update |
| - resourcemanager.projects.get |
| - storage.buckets.list |
| - storage.objects.create |
| - storage.objects.delete |
| - storage.objects.get |
| - storage.objects.list |
| - storage.objects.update |
