GCP IAM Updates Detected

jdyke · Oct 2, 2024 · 490a5e1 · 490a5e1
1 parent 90648db
commit 490a5e1
Show file tree

Hide file tree

Showing 8 changed files with 78 additions and 0 deletions.
diff --git a/roles/networksecurity.mirroringDeploymentAdmin b/roles/networksecurity.mirroringDeploymentAdmin
@@ -0,0 +1,11 @@
+{
+  "description": "Enables full access to mirroring resources on the Producer's side.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networksecurity.mirroringDeploymentAdmin",
+  "stage": "ALPHA",
+  "title": "Mirroring Deployment Admin"
+}
diff --git a/roles/networksecurity.mirroringDeploymentUser b/roles/networksecurity.mirroringDeploymentUser
@@ -0,0 +1,7 @@
+{
+  "description": "Allows a consumer to connect their mirroringEndpointGroup to the Producer's mirroringDeploymentGroup.",
+  "etag": "AA==",
+  "name": "roles/networksecurity.mirroringDeploymentUser",
+  "stage": "ALPHA",
+  "title": "Mirroring Deployment User"
+}
diff --git a/roles/networksecurity.mirroringDeploymentViewer b/roles/networksecurity.mirroringDeploymentViewer
@@ -0,0 +1,11 @@
+{
+  "description": "Enables read-only access to mirroring resources on the Producer's side.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networksecurity.mirroringDeploymentViewer",
+  "stage": "ALPHA",
+  "title": "Mirroring Deployment Viewer"
+}
diff --git a/roles/networksecurity.mirroringEndpointAdmin b/roles/networksecurity.mirroringEndpointAdmin
@@ -0,0 +1,11 @@
+{
+  "description": "Enables full access to mirroring resources on the consumer's side.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networksecurity.mirroringEndpointAdmin",
+  "stage": "ALPHA",
+  "title": "Mirroring Endpoint Admin"
+}
diff --git a/roles/networksecurity.mirroringEndpointUser b/roles/networksecurity.mirroringEndpointUser
@@ -0,0 +1,7 @@
+{
+  "description": "Allows a consumer to connect their networks to a mirroringEndpointGroup.",
+  "etag": "AA==",
+  "name": "roles/networksecurity.mirroringEndpointUser",
+  "stage": "ALPHA",
+  "title": "Mirroring Endpoint User"
+}
diff --git a/roles/networksecurity.mirroringEndpointViewer b/roles/networksecurity.mirroringEndpointViewer
@@ -0,0 +1,11 @@
+{
+  "description": "Enables read-only access to mirroring resources on the Consumer's side.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "resourcemanager.projects.get",
+    "resourcemanager.projects.list"
+  ],
+  "name": "roles/networksecurity.mirroringEndpointViewer",
+  "stage": "ALPHA",
+  "title": "Mirroring Endpoint Viewer"
+}
diff --git a/roles/run.builder b/roles/run.builder
@@ -0,0 +1,15 @@
+{
+  "description": "Can build Cloud Run functions and source deployed services.",
+  "etag": "AA==",
+  "includedPermissions": [
+    "artifactregistry.repositories.deleteArtifacts",
+    "artifactregistry.repositories.downloadArtifacts",
+    "artifactregistry.repositories.uploadArtifacts",
+    "logging.logEntries.create",
+    "source.repos.get",
+    "storage.objects.get"
+  ],
+  "name": "roles/run.builder",
+  "stage": "ALPHA",
+  "title": "Cloud Run Builder"
+}
diff --git a/roles/spanner.backupAdmin b/roles/spanner.backupAdmin
@@ -8,6 +8,11 @@
     "spanner.backupOperations.cancel",
     "spanner.backupOperations.get",
     "spanner.backupOperations.list",
+    "spanner.backupSchedules.create",
+    "spanner.backupSchedules.delete",
+    "spanner.backupSchedules.get",
+    "spanner.backupSchedules.list",
+    "spanner.backupSchedules.update",
     "spanner.backups.copy",
     "spanner.backups.create",
     "spanner.backups.delete",