roles/container.nodeServiceAgent 📋 Copy

Title: Kubernetes Engine Node Service Agent

Description: Minimal set of permission required by a GKE node to support standard capabilities such as logging and monitoring export, and image pulls.

Stage: GA

11 Assigned Permissions:

• autoscaling.sites.writeMetrics
• logging.logEntries.create
• monitoring.metricDescriptors.create
• monitoring.metricDescriptors.list
• monitoring.timeSeries.create
• monitoring.timeSeries.list
• resourcemanager.projects.get
• resourcemanager.projects.list
• serviceusage.services.use
• storage.objects.get
• storage.objects.list