Role Definitions

[kidynamit]

Defining the roles for the service accounts and user in GCloud IAM.

[kidynamit]

Current list of permission for the (platform|extensions).team.developer found in

tesserarius/etc/tesserarius/roles.yaml

Lines 10 to 179 in 9d0979a

	- cloudbuild.builds.create
	- cloudbuild.builds.get
	- container.apiServices.get
	- container.apiServices.list
	- container.backendConfigs.get
	- container.backendConfigs.list
	- container.bindings.get
	- container.bindings.list
	- container.certificateSigningRequests.get
	- container.certificateSigningRequests.list
	- container.clusterRoleBindings.get
	- container.clusterRoleBindings.list
	- container.clusterRoles.get
	- container.clusterRoles.list
	- container.clusters.get
	- container.clusters.list
	- container.componentStatuses.get
	- container.componentStatuses.list
	- container.configMaps.get
	- container.configMaps.list
	- container.controllerRevisions.get
	- container.controllerRevisions.list
	- container.cronJobs.get
	- container.cronJobs.getStatus
	- container.cronJobs.list
	- container.customResourceDefinitions.get
	- container.customResourceDefinitions.list
	- container.daemonSets.get
	- container.daemonSets.getStatus
	- container.daemonSets.list
	- container.deployments.create
	- container.deployments.delete
	- container.deployments.get
	- container.deployments.getScale
	- container.deployments.getStatus
	- container.deployments.list
	- container.deployments.rollback
	- container.deployments.update
	- container.deployments.updateScale
	- container.deployments.updateStatus
	- container.endpoints.create
	- container.endpoints.delete
	- container.endpoints.get
	- container.endpoints.list
	- container.endpoints.update
	- container.events.create
	- container.events.delete
	- container.events.get
	- container.events.list
	- container.events.update
	- container.horizontalPodAutoscalers.get
	- container.horizontalPodAutoscalers.getStatus
	- container.horizontalPodAutoscalers.list
	- container.ingresses.get
	- container.ingresses.getStatus
	- container.ingresses.list
	- container.initializerConfigurations.get
	- container.initializerConfigurations.list
	- container.jobs.create
	- container.jobs.delete
	- container.jobs.get
	- container.jobs.getStatus
	- container.jobs.list
	- container.jobs.update
	- container.jobs.updateStatus
	- container.limitRanges.get
	- container.limitRanges.list
	- container.namespaces.get
	- container.namespaces.getStatus
	- container.namespaces.list
	- container.namespaces.update
	- container.namespaces.updateStatus
	- container.networkPolicies.get
	- container.networkPolicies.list
	- container.nodes.get
	- container.nodes.getStatus
	- container.nodes.list
	- container.operations.get
	- container.operations.list
	- container.persistentVolumeClaims.create
	- container.persistentVolumeClaims.delete
	- container.persistentVolumeClaims.get
	- container.persistentVolumeClaims.getStatus
	- container.persistentVolumeClaims.list
	- container.persistentVolumeClaims.update
	- container.persistentVolumeClaims.updateStatus
	- container.persistentVolumes.create
	- container.persistentVolumes.get
	- container.persistentVolumes.getStatus
	- container.persistentVolumes.list
	- container.persistentVolumes.update
	- container.persistentVolumes.updateStatus
	- container.petSets.get
	- container.petSets.list
	- container.podDisruptionBudgets.get
	- container.podDisruptionBudgets.getStatus
	- container.podDisruptionBudgets.list
	- container.podPresets.get
	- container.podPresets.list
	- container.podSecurityPolicies.get
	- container.podSecurityPolicies.list
	- container.podTemplates.get
	- container.podTemplates.list
	- container.pods.attach
	- container.pods.create
	- container.pods.delete
	- container.pods.evict
	- container.pods.exec
	- container.pods.get
	- container.pods.getLogs
	- container.pods.getStatus
	- container.pods.initialize
	- container.pods.list
	- container.pods.portForward
	- container.pods.update
	- container.pods.updateStatus
	- container.replicaSets.get
	- container.replicaSets.getScale
	- container.replicaSets.getStatus
	- container.replicaSets.list
	- container.replicationControllers.get
	- container.replicationControllers.getScale
	- container.replicationControllers.getStatus
	- container.replicationControllers.list
	- container.resourceQuotas.get
	- container.resourceQuotas.getStatus
	- container.resourceQuotas.list
	- container.roleBindings.get
	- container.roleBindings.list
	- container.roles.get
	- container.roles.list
	- container.scheduledJobs.get
	- container.scheduledJobs.list
	- container.secrets.create
	- container.secrets.get
	- container.secrets.list
	- container.secrets.update
	- container.serviceAccounts.get
	- container.serviceAccounts.list
	- container.services.get
	- container.services.getStatus
	- container.services.list
	- container.statefulSets.get
	- container.statefulSets.getStatus
	- container.statefulSets.list
	- container.storageClasses.get
	- container.storageClasses.list
	- container.thirdPartyObjects.get
	- container.thirdPartyObjects.list
	- container.thirdPartyResources.get
	- container.thirdPartyResources.list
	- container.tokenReviews.create
	- logging.exclusions.get
	- logging.exclusions.list
	- logging.logEntries.list
	- logging.logMetrics.get
	- logging.logMetrics.list
	- logging.logServiceIndexes.list
	- logging.logServices.list
	- logging.logs.list
	- logging.sinks.get
	- logging.sinks.list
	- logging.usage.get
	- resourcemanager.projects.get
	- serviceusage.services.use
	- storage.buckets.get
	- storage.buckets.list
	- storage.objects.create
	- storage.objects.get
	- storage.objects.list