roles/container.hostServiceAgentUser 📋 Copy

Title: Kubernetes Engine Host Service Agent User

Description: Allows the Kubernetes Engine service account in the host project to configure shared network resources for cluster management. Also gives access to inspect the firewall rules in the host project, and configure Cloud DNS resources.

Stage: GA

15 Assigned Permissions:

• compute.firewalls.get
• container.hostServiceAgent.use
• dns.networks.bindDNSResponsePolicy
• dns.networks.bindPrivateDNSPolicy
• dns.networks.bindPrivateDNSZone
• dns.responsePolicies.create
• dns.responsePolicies.delete
• dns.responsePolicies.get
• dns.responsePolicies.list
• dns.responsePolicies.update
• dns.responsePolicyRules.create
• dns.responsePolicyRules.delete
• dns.responsePolicyRules.get
• dns.responsePolicyRules.list
• dns.responsePolicyRules.update