roles/krmapihosting.serviceAgent

Title: KRM API Hosting Service Agent

Description: Gives KRM API Hosting service account access to managed resource.

Stage: GA

Role Type: Service Agent

433 Assigned Permissions:

🔍

compute.instanceGroupManagers.get

compute.regions.get

container.apiServices.create

container.apiServices.delete

container.apiServices.get

container.apiServices.getStatus

container.apiServices.list

container.apiServices.update

container.apiServices.updateStatus

container.auditSinks.create

container.auditSinks.delete

container.auditSinks.get

container.auditSinks.list

container.auditSinks.update

container.backendConfigs.create

container.backendConfigs.delete

container.backendConfigs.get

container.backendConfigs.list

container.backendConfigs.update

container.bindings.create

container.bindings.delete

container.bindings.get

container.bindings.list

container.bindings.update

container.certificateSigningRequests.approve

container.certificateSigningRequests.create

container.certificateSigningRequests.delete

container.certificateSigningRequests.get

container.certificateSigningRequests.getStatus

container.certificateSigningRequests.list

container.certificateSigningRequests.update

container.certificateSigningRequests.updateStatus

container.clusterRoleBindings.create

container.clusterRoleBindings.delete

container.clusterRoleBindings.get

container.clusterRoleBindings.list

container.clusterRoleBindings.update

container.clusterRoles.bind

container.clusterRoles.create

container.clusterRoles.delete

container.clusterRoles.escalate

container.clusterRoles.get

container.clusterRoles.list

container.clusterRoles.update

container.clusters.connect

container.clusters.create

container.clusters.createTagBinding

container.clusters.delete

container.clusters.deleteTagBinding

container.clusters.get

container.clusters.getCredentials

container.clusters.impersonate

container.clusters.list

container.clusters.listEffectiveTags

container.clusters.listTagBindings

container.clusters.update

container.componentStatuses.get

container.componentStatuses.list

container.configMaps.create

container.configMaps.delete

container.configMaps.get

container.configMaps.list

container.configMaps.update

container.controllerRevisions.create

container.controllerRevisions.delete

container.controllerRevisions.get

container.controllerRevisions.list

container.controllerRevisions.update

container.cronJobs.create

container.cronJobs.delete

container.cronJobs.get

container.cronJobs.getStatus

container.cronJobs.list

container.cronJobs.update

container.cronJobs.updateStatus

container.csiDrivers.create

container.csiDrivers.delete

container.csiDrivers.get

container.csiDrivers.list

container.csiDrivers.update

container.csiNodeInfos.create

container.csiNodeInfos.delete

container.csiNodeInfos.get

container.csiNodeInfos.list

container.csiNodeInfos.update

container.csiNodes.create

container.csiNodes.delete

container.csiNodes.get

container.csiNodes.list

container.csiNodes.update

container.customResourceDefinitions.create

container.customResourceDefinitions.delete

container.customResourceDefinitions.get

container.customResourceDefinitions.getStatus

container.customResourceDefinitions.list

container.customResourceDefinitions.update

container.customResourceDefinitions.updateStatus

container.daemonSets.create

container.daemonSets.delete

container.daemonSets.get

container.daemonSets.getStatus

container.daemonSets.list

container.daemonSets.update

container.daemonSets.updateStatus

container.deployments.create

container.deployments.delete

container.deployments.get

container.deployments.getScale

container.deployments.getStatus

container.deployments.list

container.deployments.rollback

container.deployments.update

container.deployments.updateScale

container.deployments.updateStatus

container.endpointSlices.create

container.endpointSlices.delete

container.endpointSlices.get

container.endpointSlices.list

container.endpointSlices.update

container.endpoints.create

container.endpoints.delete

container.endpoints.get

container.endpoints.list

container.endpoints.update

container.events.create

container.events.delete

container.events.get

container.events.list

container.events.update

container.frontendConfigs.create

container.frontendConfigs.delete

container.frontendConfigs.get

container.frontendConfigs.list

container.frontendConfigs.update

container.horizontalPodAutoscalers.create

container.horizontalPodAutoscalers.delete

container.horizontalPodAutoscalers.get

container.horizontalPodAutoscalers.getStatus

container.horizontalPodAutoscalers.list

container.horizontalPodAutoscalers.update

container.horizontalPodAutoscalers.updateStatus

container.hostServiceAgent.use

container.ingresses.create

container.ingresses.delete

container.ingresses.get

container.ingresses.getStatus

container.ingresses.list

container.ingresses.update

container.ingresses.updateStatus

container.initializerConfigurations.create

container.initializerConfigurations.delete

container.initializerConfigurations.get

container.initializerConfigurations.list

container.initializerConfigurations.update

container.jobs.create

container.jobs.delete

container.jobs.get

container.jobs.getStatus

container.jobs.list

container.jobs.update

container.jobs.updateStatus

container.leases.create

container.leases.delete

container.leases.get

container.leases.list

container.leases.update

container.limitRanges.create

container.limitRanges.delete

container.limitRanges.get

container.limitRanges.list

container.limitRanges.update

container.localSubjectAccessReviews.create

container.localSubjectAccessReviews.list

container.managedCertificates.create

container.managedCertificates.delete

container.managedCertificates.get

container.managedCertificates.list

container.managedCertificates.update

container.mutatingWebhookConfigurations.create

container.mutatingWebhookConfigurations.delete

container.mutatingWebhookConfigurations.get

container.mutatingWebhookConfigurations.list

container.mutatingWebhookConfigurations.update

container.namespaces.create

container.namespaces.delete

container.namespaces.finalize

container.namespaces.get

container.namespaces.getStatus

container.namespaces.list

container.namespaces.update

container.namespaces.updateStatus

container.networkPolicies.create

container.networkPolicies.delete

container.networkPolicies.get

container.networkPolicies.list

container.networkPolicies.update

container.nodes.create

container.nodes.delete

container.nodes.get

container.nodes.getStatus

container.nodes.list

container.nodes.proxy

container.nodes.update

container.nodes.updateStatus

container.operations.get

container.operations.list

container.persistentVolumeClaims.create

container.persistentVolumeClaims.delete

container.persistentVolumeClaims.get

container.persistentVolumeClaims.getStatus

container.persistentVolumeClaims.list

container.persistentVolumeClaims.update

container.persistentVolumeClaims.updateStatus

container.persistentVolumes.create

container.persistentVolumes.delete

container.persistentVolumes.get

container.persistentVolumes.getStatus

container.persistentVolumes.list

container.persistentVolumes.update

container.persistentVolumes.updateStatus

container.petSets.create

container.petSets.delete

container.petSets.get

container.petSets.list

container.petSets.update

container.petSets.updateStatus

container.podDisruptionBudgets.create

container.podDisruptionBudgets.delete

container.podDisruptionBudgets.get

container.podDisruptionBudgets.getStatus

container.podDisruptionBudgets.list

container.podDisruptionBudgets.update

container.podDisruptionBudgets.updateStatus

container.podPresets.create

container.podPresets.delete

container.podPresets.get

container.podPresets.list

container.podPresets.update

container.podSecurityPolicies.create

container.podSecurityPolicies.delete

container.podSecurityPolicies.get

container.podSecurityPolicies.list

container.podSecurityPolicies.update

container.podSecurityPolicies.use

container.podTemplates.create

container.podTemplates.delete

container.podTemplates.get

container.podTemplates.list

container.podTemplates.update

container.pods.attach

container.pods.create

container.pods.delete

container.pods.evict

container.pods.exec

container.pods.get

container.pods.getLogs

container.pods.getStatus

container.pods.initialize

container.pods.list

container.pods.portForward

container.pods.proxy

container.pods.update

container.pods.updateStatus

container.priorityClasses.create

container.priorityClasses.delete

container.priorityClasses.get

container.priorityClasses.list

container.priorityClasses.update

container.replicaSets.create

container.replicaSets.delete

container.replicaSets.get

container.replicaSets.getScale

container.replicaSets.getStatus

container.replicaSets.list

container.replicaSets.update

container.replicaSets.updateScale

container.replicaSets.updateStatus

container.replicationControllers.create

container.replicationControllers.delete

container.replicationControllers.get

container.replicationControllers.getScale

container.replicationControllers.getStatus

container.replicationControllers.list

container.replicationControllers.update

container.replicationControllers.updateScale

container.replicationControllers.updateStatus

container.resourceQuotas.create

container.resourceQuotas.delete

container.resourceQuotas.get

container.resourceQuotas.getStatus

container.resourceQuotas.list

container.resourceQuotas.update

container.resourceQuotas.updateStatus

container.roleBindings.create

container.roleBindings.delete

container.roleBindings.get

container.roleBindings.list

container.roleBindings.update

container.roles.bind

container.roles.create

container.roles.delete

container.roles.escalate

container.roles.get

container.roles.list

container.roles.update

container.runtimeClasses.create

container.runtimeClasses.delete

container.runtimeClasses.get

container.runtimeClasses.list

container.runtimeClasses.update

container.scheduledJobs.create

container.scheduledJobs.delete

container.scheduledJobs.get

container.scheduledJobs.list

container.scheduledJobs.update

container.scheduledJobs.updateStatus

container.secrets.create

container.secrets.delete

container.secrets.get

container.secrets.list

container.secrets.update

container.selfSubjectAccessReviews.create

container.selfSubjectAccessReviews.list

container.selfSubjectRulesReviews.create

container.serviceAccounts.create

container.serviceAccounts.createToken

container.serviceAccounts.delete

container.serviceAccounts.get

container.serviceAccounts.list

container.serviceAccounts.update

container.services.create

container.services.delete

container.services.get

container.services.getStatus

container.services.list

container.services.proxy

container.services.update

container.services.updateStatus

container.statefulSets.create

container.statefulSets.delete

container.statefulSets.get

container.statefulSets.getScale

container.statefulSets.getStatus

container.statefulSets.list

container.statefulSets.update

container.statefulSets.updateScale

container.statefulSets.updateStatus

container.storageClasses.create

container.storageClasses.delete

container.storageClasses.get

container.storageClasses.list

container.storageClasses.update

container.storageStates.create

container.storageStates.delete

container.storageStates.get

container.storageStates.getStatus

container.storageStates.list

container.storageStates.update

container.storageStates.updateStatus

container.storageVersionMigrations.create

container.storageVersionMigrations.delete

container.storageVersionMigrations.get

container.storageVersionMigrations.getStatus

container.storageVersionMigrations.list

container.storageVersionMigrations.update

container.storageVersionMigrations.updateStatus

container.subjectAccessReviews.create

container.subjectAccessReviews.list

container.thirdPartyObjects.create

container.thirdPartyObjects.delete

container.thirdPartyObjects.get

container.thirdPartyObjects.list

container.thirdPartyObjects.update

container.thirdPartyResources.create

container.thirdPartyResources.delete

container.thirdPartyResources.get

container.thirdPartyResources.list

container.thirdPartyResources.update

container.tokenReviews.create

container.updateInfos.create

container.updateInfos.delete

container.updateInfos.get

container.updateInfos.list

container.updateInfos.update

container.validatingWebhookConfigurations.create

container.validatingWebhookConfigurations.delete

container.validatingWebhookConfigurations.get

container.validatingWebhookConfigurations.list

container.validatingWebhookConfigurations.update

container.volumeAttachments.create

container.volumeAttachments.delete

container.volumeAttachments.get

container.volumeAttachments.getStatus

container.volumeAttachments.list

container.volumeAttachments.update

container.volumeAttachments.updateStatus

container.volumeSnapshotClasses.create

container.volumeSnapshotClasses.delete

container.volumeSnapshotClasses.get

container.volumeSnapshotClasses.list

container.volumeSnapshotClasses.update

container.volumeSnapshotContents.create

container.volumeSnapshotContents.delete

container.volumeSnapshotContents.get

container.volumeSnapshotContents.getStatus

container.volumeSnapshotContents.list

container.volumeSnapshotContents.update

container.volumeSnapshotContents.updateStatus

container.volumeSnapshots.create

container.volumeSnapshots.delete

container.volumeSnapshots.get

container.volumeSnapshots.getStatus

container.volumeSnapshots.list

container.volumeSnapshots.update

container.volumeSnapshots.updateStatus

iam.serviceAccounts.actAs

recommender.containerDiagnosisInsights.get

recommender.containerDiagnosisInsights.list

recommender.containerDiagnosisInsights.update

recommender.containerDiagnosisRecommendations.get

recommender.containerDiagnosisRecommendations.list

recommender.containerDiagnosisRecommendations.update

recommender.locations.get

recommender.locations.list

recommender.networkAnalyzerGkeConnectivityInsights.get

recommender.networkAnalyzerGkeConnectivityInsights.list

recommender.networkAnalyzerGkeConnectivityInsights.update

recommender.networkAnalyzerGkeIpAddressInsights.get

recommender.networkAnalyzerGkeIpAddressInsights.list

recommender.networkAnalyzerGkeIpAddressInsights.update

resourcemanager.projects.get

resourcemanager.projects.list

serviceusage.services.use

roles/krmapihosting.serviceAgent 📋 Copy

433 Assigned Permissions:

roles/krmapihosting.serviceAgent