GCP Cloud Shell command for custom IAM role with minimum GCP permissions
This GCP cloud shell command is used for creating custom IAM role with minimum GCP permissions that are required by CSM.
Cloud shell command for custom IAM role with minimum GCP permissions
gcloud iam roles create <ROLE_NAME> --title <ROLE_TITLE> --project <PROJECT> --stage <ROLE_STAGE> --permissions compute.disks.create,compute.disks.createSnapshot,compute.disks.delete,compute.disks.get,compute.disks.list,compute.disks.setLabels,compute.disks.use,compute.instances.attachDisk,compute.instances.create,compute.instances.delete,compute.instances.detachDisk,compute.instances.get,compute.instances.list,compute.instances.setDeletionProtection,compute.instances.setLabels,compute.instances.setMetadata,compute.instances.setServiceAccount,compute.instances.setTags,compute.instances.start,compute.instances.stop,compute.networks.list,compute.projects.get,compute.regionOperations.get,compute.regions.list,compute.snapshots.create,compute.snapshots.delete,compute.snapshots.get,compute.snapshots.list,compute.snapshots.setLabels,compute.snapshots.useReadOnly,compute.subnetworks.list,compute.subnetworks.use,compute.zoneOperations.get,compute.zones.get,compute.zones.list,iam.serviceAccounts.actAs --quiet