roles/container.defaultNodeServiceAgent 📋 Copy

Title: Kubernetes Engine Default Node Service Agent

Description: Minimal set of permissions required by a GKE node to support standard capabilities such as logging and monitoring. Replaces the container.nodeServiceAgent role with a reduced permission set.

Stage: GA

Role Type: Service Agent

7 Assigned Permissions:

• autoscaling.sites.writeMetrics
• logging.logEntries.create
• monitoring.metricDescriptors.create
• monitoring.metricDescriptors.list
• monitoring.timeSeries.create
• monitoring.timeSeries.list
• serviceusage.services.use