roles/container.cloudKmsKeyUser 📋 Copy

Title: Kubernetes Engine KMS Crypto Key User

Description: Allow the Kubernetes Engine service agent in the cluster project to call KMS with user provided crypto keys to sign payloads.

Stage: GA

8 Assigned Permissions:

• cloudkms.cryptoKeyVersions.get
• cloudkms.cryptoKeyVersions.useToSign
• cloudkms.cryptoKeyVersions.useToVerify
• cloudkms.cryptoKeyVersions.viewPublicKey
• cloudkms.cryptoKeys.get
• cloudkms.locations.get
• cloudkms.locations.list
• resourcemanager.projects.get