Keep only used services for GCP

Author: odvarkadaniel

manifests/0000_26_cloud-controller-manager-operator_16_credentialsrequest-gcp.yaml

@@ -17,150 +17,42 @@ spec:
     kind: GCPProviderSpec
     permissions:
     - "compute.addresses.create"
-    - "compute.addresses.createInternal"
     - "compute.addresses.delete"
-    - "compute.addresses.deleteInternal"
     - "compute.addresses.get"
     - "compute.addresses.list"
-    - "compute.addresses.use"
-    - "compute.networks.get"
-    - "compute.networks.list"
-    - "compute.networks.use"
-    - "compute.networks.list"
-    - "compute.zones.list"
-    - "resourcemanager.projects.get"
-    - "compute.subnetworks.list"
-    - "compute.subnetworks.get"
-    - "compute.subnetworks.use"
-    - "compute.subnetworks.list"
-    - "compute.backendServices.create"
-    - "compute.backendServices.delete"
-    - "compute.backendServices.get"
-    - "compute.backendServices.list"
-    - "compute.backendServices.update"
-    - "compute.backendServices.use"
-    - "compute.disks.create"
-    - "compute.disks.createSnapshot"
-    - "compute.disks.delete"
-    - "compute.disks.get"
-    - "compute.disks.list"
-    - "compute.disks.listEffectiveTags"
-    - "compute.disks.listTagBindings"
-    - "compute.disks.resize"
-    - "compute.disks.setLabels"
-    - "compute.disks.update"
-    - "compute.disks.use"
-    - "compute.disks.useReadOnly"
     - "compute.firewalls.create"
     - "compute.firewalls.delete"
     - "compute.firewalls.get"
-    - "compute.firewalls.list"
     - "compute.firewalls.update"
     - "compute.forwardingRules.create"
     - "compute.forwardingRules.delete"
     - "compute.forwardingRules.get"
-    - "compute.forwardingRules.list"
-    - "compute.forwardingRules.update"
-    - "compute.forwardingRules.use"
     - "compute.healthChecks.create"
     - "compute.healthChecks.delete"
     - "compute.healthChecks.get"
-    - "compute.healthChecks.list"
     - "compute.healthChecks.update"
-    - "compute.healthChecks.use"
     - "compute.httpHealthChecks.create"
     - "compute.httpHealthChecks.delete"
     - "compute.httpHealthChecks.get"
-    - "compute.httpHealthChecks.list"
     - "compute.httpHealthChecks.update"
-    - "compute.httpHealthChecks.use"
-    - "compute.instanceGroupManagers.create"
-    - "compute.instanceGroupManagers.delete"
-    - "compute.instanceGroupManagers.get"
-    - "compute.instanceGroupManagers.list"
-    - "compute.instanceGroupManagers.update"
-    - "compute.instanceGroupManagers.use"
+    - "compute.instanceGroups.addInstances"
     - "compute.instanceGroups.create"
     - "compute.instanceGroups.delete"
     - "compute.instanceGroups.get"
-    - "compute.instanceGroups.list"
-    - "compute.instanceGroups.update"
-    - "compute.instanceGroups.use"
+    - "compute.instanceGroups.listInstances"
+    - "compute.instanceGroups.removeInstances"
+    - "compute.instances.get"
     - "compute.regionBackendServices.create"
     - "compute.regionBackendServices.delete"
     - "compute.regionBackendServices.get"
-    - "compute.regionBackendServices.getIamPolicy"
-    - "compute.regionBackendServices.list"
-    - "compute.regionBackendServices.setIamPolicy"
-    - "compute.regionBackendServices.setSecurityPolicy"
     - "compute.regionBackendServices.update"
-    - "compute.regionBackendServices.use"
-    - "compute.instances.attachDisk"
-    - "compute.instances.create"
-    - "compute.instances.createTagBinding"
-    - "compute.instances.delete"
-    - "compute.instances.deleteAccessConfig"
-    - "compute.instances.deleteTagBinding"
-    - "compute.instances.detachDisk"
-    - "compute.instances.get"
-    - "compute.instances.getEffectiveFirewalls"
-    - "compute.instances.list"
-    - "compute.instances.osAdminLogin"
-    - "compute.instances.osLogin"
-    - "compute.instances.reset"
-    - "compute.instances.resume"
-    - "compute.instances.setLabels"
-    - "compute.instances.setMachineResources"
-    - "compute.instances.setMachineType"
-    - "compute.instances.setMetadata"
-    - "compute.instances.setMinCpuPlatform"
-    - "compute.instances.setName"
-    - "compute.instances.setScheduling"
-    - "compute.instances.setTags"
-    - "compute.instances.start"
-    - "compute.instances.startWithEncryptionKey"
-    - "compute.instances.stop"
-    - "compute.instances.suspend"
-    - "compute.instances.update"
-    - "compute.instances.use"
-    - "compute.instances.useReadOnly"
-    - "compute.instanceTemplates.create"
-    - "compute.instanceTemplates.delete"
-    - "compute.instanceTemplates.get"
-    - "compute.instanceTemplates.list"
-    - "compute.zoneOperations.get"
-    - "compute.zoneOperations.list"
-    - "compute.zones.get"
-    - "compute.zones.list"
-    - "compute.projects.get"
-    - "compute.regions.get"
-    - "compute.regions.list"
-    - "compute.routers.create"
-    - "compute.routers.delete"
-    - "compute.routers.get"
-    - "compute.routers.list"
-    - "compute.routers.update"
-    - "compute.routers.use"
-    - "compute.routes.delete"
-    - "compute.routes.list"
-    - "compute.targetPools.addHealthCheck"
     - "compute.targetPools.addInstance"
     - "compute.targetPools.create"
     - "compute.targetPools.delete"
     - "compute.targetPools.get"
-    - "compute.targetPools.list"
     - "compute.targetPools.removeInstance"
-    - "compute.targetPools.update"
-    - "compute.targetPools.use"
-    - "compute.networkEndpointGroups.attachNetworkEndpoints"
-    - "compute.networkEndpointGroups.create"
-    - "compute.networkEndpointGroups.delete"
-    - "compute.networkEndpointGroups.detachNetworkEndpoints"
-    - "compute.networkEndpointGroups.get"
-    - "compute.networkEndpointGroups.list"
-    - "compute.networkEndpointGroups.use"
+    - "compute.zones.list"
 
-    
     # If set to true, don't check whether the requested
     # roles have the necessary services enabled
     skipServiceCheck: true