NOJIRA: Added default permissions

castai · Dec 11, 2024 · 7c9eb35 · 7c9eb35
1 parent 12b8aa6
commit 7c9eb35
Showing 1 changed file with 89 additions and 0 deletions.
diff --git a/output.tf b/output.tf
@@ -19,3 +19,92 @@ output "service_account_email" {
   value = var.create_service_account ? google_service_account.castai_service_account[0].email : ""
 }
 
+output "default_compute_manager_permissions" {
+  value = [
+    "container.clusters.get",
+    "container.clusters.update",
+    "container.certificateSigningRequests.approve",
+    "compute.instances.get",
+    "compute.instances.list",
+    "compute.instances.create",
+    "compute.instances.start",
+    "compute.instances.stop",
+    "compute.instances.delete",
+    "compute.instances.setLabels",
+    "compute.instances.setServiceAccount",
+    "compute.instances.setMetadata",
+    "compute.instances.setTags",
+    "compute.instanceGroupManagers.get",
+    "compute.instanceGroupManagers.update",
+    "compute.instanceGroups.get",
+    "compute.networks.use",
+    "compute.networks.useExternalIp",
+    "compute.subnetworks.get",
+    "compute.subnetworks.use",
+    "compute.subnetworks.useExternalIp",
+    "compute.addresses.use",
+    "compute.disks.use",
+    "compute.disks.create",
+    "compute.disks.setLabels",
+    "compute.images.get",
+    "compute.images.useReadOnly",
+    "compute.instanceTemplates.get",
+    "compute.instanceTemplates.list",
+    "compute.instanceTemplates.create",
+    "compute.instanceTemplates.delete",
+    "compute.regionOperations.get",
+    "compute.zoneOperations.get",
+    "compute.zones.list",
+    "compute.zones.get",
+    "serviceusage.services.list",
+    "resourcemanager.projects.getIamPolicy",
+    "compute.targetPools.get",
+    "compute.targetPools.addInstance",
+    "compute.targetPools.removeInstance",
+    "compute.instances.use"]
+}
+
+output "default_castai_role_permissions" {
+  value = [
+    "container.clusters.get",
+    "container.clusters.update",
+    "container.certificateSigningRequests.approve",
+    "compute.instances.get",
+    "compute.instances.list",
+    "compute.instances.create",
+    "compute.instances.start",
+    "compute.instances.stop",
+    "compute.instances.delete",
+    "compute.instances.setLabels",
+    "compute.instances.setServiceAccount",
+    "compute.instances.setMetadata",
+    "compute.instances.setTags",
+    "compute.instanceGroupManagers.get",
+    "compute.instanceGroupManagers.update",
+    "compute.instanceGroups.get",
+    "compute.networks.use",
+    "compute.networks.useExternalIp",
+    "compute.subnetworks.get",
+    "compute.subnetworks.use",
+    "compute.subnetworks.useExternalIp",
+    "compute.addresses.use",
+    "compute.disks.use",
+    "compute.disks.create",
+    "compute.disks.setLabels",
+    "compute.images.get",
+    "compute.images.useReadOnly",
+    "compute.instanceTemplates.get",
+    "compute.instanceTemplates.list",
+    "compute.instanceTemplates.create",
+    "compute.instanceTemplates.delete",
+    "compute.regionOperations.get",
+    "compute.zoneOperations.get",
+    "compute.zones.list",
+    "compute.zones.get",
+    "serviceusage.services.list",
+    "resourcemanager.projects.getIamPolicy",
+    "compute.targetPools.get",
+    "compute.targetPools.addInstance",
+    "compute.targetPools.removeInstance",
+    "compute.instances.use"]
+}