Cloud Service Mesh control plane roles and permissions

container.apiServices.*

• container.apiServices.create
• container.apiServices.delete
• container.apiServices.get
• container.apiServices.getStatus
• container.apiServices.list
• container.apiServices.update
• container.apiServices.updateStatus

container.auditSinks.*

• container.auditSinks.create
• container.auditSinks.delete
• container.auditSinks.get
• container.auditSinks.list
• container.auditSinks.update

container.backendConfigs.*

• container.backendConfigs.create
• container.backendConfigs.delete
• container.backendConfigs.get
• container.backendConfigs.list
• container.backendConfigs.update

container.bindings.*

• container.bindings.create
• container.bindings.delete
• container.bindings.get
• container.bindings.list
• container.bindings.update

container.certificateSigningRequests.*

• container.certificateSigningRequests.approve
• container.certificateSigningRequests.create
• container.certificateSigningRequests.delete
• container.certificateSigningRequests.get
• container.certificateSigningRequests.getStatus
• container.certificateSigningRequests.list
• container.certificateSigningRequests.update
• container.certificateSigningRequests.updateStatus

container.clusterRoleBindings.*

• container.clusterRoleBindings.create
• container.clusterRoleBindings.delete
• container.clusterRoleBindings.get
• container.clusterRoleBindings.list
• container.clusterRoleBindings.update

container.clusterRoles.*

• container.clusterRoles.bind
• container.clusterRoles.create
• container.clusterRoles.delete
• container.clusterRoles.escalate
• container.clusterRoles.get
• container.clusterRoles.list
• container.clusterRoles.update

container.componentStatuses.*

• container.componentStatuses.get
• container.componentStatuses.list

container.configMaps.*

• container.configMaps.create
• container.configMaps.delete
• container.configMaps.get
• container.configMaps.list
• container.configMaps.update

container.controllerRevisions.*

• container.controllerRevisions.create
• container.controllerRevisions.delete
• container.controllerRevisions.get
• container.controllerRevisions.list
• container.controllerRevisions.update

container.cronJobs.*

• container.cronJobs.create
• container.cronJobs.delete
• container.cronJobs.get
• container.cronJobs.getStatus
• container.cronJobs.list
• container.cronJobs.update
• container.cronJobs.updateStatus

container.csiDrivers.*

• container.csiDrivers.create
• container.csiDrivers.delete
• container.csiDrivers.get
• container.csiDrivers.list
• container.csiDrivers.update

container.csiNodeInfos.*

• container.csiNodeInfos.create
• container.csiNodeInfos.delete
• container.csiNodeInfos.get
• container.csiNodeInfos.list
• container.csiNodeInfos.update

container.csiNodes.*

• container.csiNodes.create
• container.csiNodes.delete
• container.csiNodes.get
• container.csiNodes.list
• container.csiNodes.update

container.customResourceDefinitions.*

• container.customResourceDefinitions.create
• container.customResourceDefinitions.delete
• container.customResourceDefinitions.get
• container.customResourceDefinitions.getStatus
• container.customResourceDefinitions.list
• container.customResourceDefinitions.update
• container.customResourceDefinitions.updateStatus

container.daemonSets.*

• container.daemonSets.create
• container.daemonSets.delete
• container.daemonSets.get
• container.daemonSets.getStatus
• container.daemonSets.list
• container.daemonSets.update
• container.daemonSets.updateStatus

container.deployments.*

• container.deployments.create
• container.deployments.delete
• container.deployments.get
• container.deployments.getScale
• container.deployments.getStatus
• container.deployments.list
• container.deployments.rollback
• container.deployments.update
• container.deployments.updateScale
• container.deployments.updateStatus

container.endpointSlices.*

• container.endpointSlices.create
• container.endpointSlices.delete
• container.endpointSlices.get
• container.endpointSlices.list
• container.endpointSlices.update

container.endpoints.*

• container.endpoints.create
• container.endpoints.delete
• container.endpoints.get
• container.endpoints.list
• container.endpoints.update

container.events.*

• container.events.create
• container.events.delete
• container.events.get
• container.events.list
• container.events.update

container.frontendConfigs.*

• container.frontendConfigs.create
• container.frontendConfigs.delete
• container.frontendConfigs.get
• container.frontendConfigs.list
• container.frontendConfigs.update

container.horizontalPodAutoscalers.*

• container.horizontalPodAutoscalers.create
• container.horizontalPodAutoscalers.delete
• container.horizontalPodAutoscalers.get
• container.horizontalPodAutoscalers.getStatus
• container.horizontalPodAutoscalers.list
• container.horizontalPodAutoscalers.update
• container.horizontalPodAutoscalers.updateStatus

container.ingresses.*

• container.ingresses.create
• container.ingresses.delete
• container.ingresses.get
• container.ingresses.getStatus
• container.ingresses.list
• container.ingresses.update
• container.ingresses.updateStatus

container.initializerConfigurations.*

• container.initializerConfigurations.create
• container.initializerConfigurations.delete
• container.initializerConfigurations.get
• container.initializerConfigurations.list
• container.initializerConfigurations.update

container.jobs.*

• container.jobs.create
• container.jobs.delete
• container.jobs.get
• container.jobs.getStatus
• container.jobs.list
• container.jobs.update
• container.jobs.updateStatus

container.leases.*

• container.leases.create
• container.leases.delete
• container.leases.get
• container.leases.list
• container.leases.update

container.limitRanges.*

• container.limitRanges.create
• container.limitRanges.delete
• container.limitRanges.get
• container.limitRanges.list
• container.limitRanges.update

container.localSubjectAccessReviews.*

• container.localSubjectAccessReviews.create
• container.localSubjectAccessReviews.list

container.managedCertificates.*

• container.managedCertificates.create
• container.managedCertificates.delete
• container.managedCertificates.get
• container.managedCertificates.list
• container.managedCertificates.update

container.mutatingWebhookConfigurations.*

• container.mutatingWebhookConfigurations.create
• container.mutatingWebhookConfigurations.delete
• container.mutatingWebhookConfigurations.get
• container.mutatingWebhookConfigurations.list
• container.mutatingWebhookConfigurations.update

container.namespaces.*

• container.namespaces.create
• container.namespaces.delete
• container.namespaces.finalize
• container.namespaces.get
• container.namespaces.getStatus
• container.namespaces.list
• container.namespaces.update
• container.namespaces.updateStatus

container.networkPolicies.*

• container.networkPolicies.create
• container.networkPolicies.delete
• container.networkPolicies.get
• container.networkPolicies.list
• container.networkPolicies.update

container.nodes.*

• container.nodes.create
• container.nodes.delete
• container.nodes.get
• container.nodes.getStatus
• container.nodes.list
• container.nodes.proxy
• container.nodes.update
• container.nodes.updateStatus

container.operations.*

• container.operations.get
• container.operations.list

container.persistentVolumeClaims.*

• container.persistentVolumeClaims.create
• container.persistentVolumeClaims.delete
• container.persistentVolumeClaims.get
• container.persistentVolumeClaims.getStatus
• container.persistentVolumeClaims.list
• container.persistentVolumeClaims.update
• container.persistentVolumeClaims.updateStatus

container.persistentVolumes.*

• container.persistentVolumes.create
• container.persistentVolumes.delete
• container.persistentVolumes.get
• container.persistentVolumes.getStatus
• container.persistentVolumes.list
• container.persistentVolumes.update
• container.persistentVolumes.updateStatus

container.petSets.*

• container.petSets.create
• container.petSets.delete
• container.petSets.get
• container.petSets.list
• container.petSets.update
• container.petSets.updateStatus

container.podDisruptionBudgets.*

• container.podDisruptionBudgets.create
• container.podDisruptionBudgets.delete
• container.podDisruptionBudgets.get
• container.podDisruptionBudgets.getStatus
• container.podDisruptionBudgets.list
• container.podDisruptionBudgets.update
• container.podDisruptionBudgets.updateStatus

container.podPresets.*

• container.podPresets.create
• container.podPresets.delete
• container.podPresets.get
• container.podPresets.list
• container.podPresets.update

container.podSecurityPolicies.*

• container.podSecurityPolicies.create
• container.podSecurityPolicies.delete
• container.podSecurityPolicies.get
• container.podSecurityPolicies.list
• container.podSecurityPolicies.update
• container.podSecurityPolicies.use

container.podTemplates.*

• container.podTemplates.create
• container.podTemplates.delete
• container.podTemplates.get
• container.podTemplates.list
• container.podTemplates.update

container.pods.*

• container.pods.attach
• container.pods.create
• container.pods.delete
• container.pods.evict
• container.pods.exec
• container.pods.get
• container.pods.getLogs
• container.pods.getStatus
• container.pods.initialize
• container.pods.list
• container.pods.portForward
• container.pods.proxy
• container.pods.update
• container.pods.updateStatus

container.priorityClasses.*

• container.priorityClasses.create
• container.priorityClasses.delete
• container.priorityClasses.get
• container.priorityClasses.list
• container.priorityClasses.update

container.replicaSets.*

• container.replicaSets.create
• container.replicaSets.delete
• container.replicaSets.get
• container.replicaSets.getScale
• container.replicaSets.getStatus
• container.replicaSets.list
• container.replicaSets.update
• container.replicaSets.updateScale
• container.replicaSets.updateStatus

container.replicationControllers.*

• container.replicationControllers.create
• container.replicationControllers.delete
• container.replicationControllers.get
• container.replicationControllers.getScale
• container.replicationControllers.getStatus
• container.replicationControllers.list
• container.replicationControllers.update
• container.replicationControllers.updateScale
• container.replicationControllers.updateStatus

container.resourceQuotas.*

• container.resourceQuotas.create
• container.resourceQuotas.delete
• container.resourceQuotas.get
• container.resourceQuotas.getStatus
• container.resourceQuotas.list
• container.resourceQuotas.update
• container.resourceQuotas.updateStatus

container.roleBindings.*

• container.roleBindings.create
• container.roleBindings.delete
• container.roleBindings.get
• container.roleBindings.list
• container.roleBindings.update

container.roles.*

• container.roles.bind
• container.roles.create
• container.roles.delete
• container.roles.escalate
• container.roles.get
• container.roles.list
• container.roles.update

container.runtimeClasses.*

• container.runtimeClasses.create
• container.runtimeClasses.delete
• container.runtimeClasses.get
• container.runtimeClasses.list
• container.runtimeClasses.update

container.scheduledJobs.*

• container.scheduledJobs.create
• container.scheduledJobs.delete
• container.scheduledJobs.get
• container.scheduledJobs.list
• container.scheduledJobs.update
• container.scheduledJobs.updateStatus

container.secrets.*

• container.secrets.create
• container.secrets.delete
• container.secrets.get
• container.secrets.list
• container.secrets.update

container.selfSubjectAccessReviews.*

• container.selfSubjectAccessReviews.create
• container.selfSubjectAccessReviews.list

container.serviceAccounts.*

• container.serviceAccounts.create
• container.serviceAccounts.createToken
• container.serviceAccounts.delete
• container.serviceAccounts.get
• container.serviceAccounts.list
• container.serviceAccounts.update

container.services.*

• container.services.create
• container.services.delete
• container.services.get
• container.services.getStatus
• container.services.list
• container.services.proxy
• container.services.update
• container.services.updateStatus

container.statefulSets.*

• container.statefulSets.create
• container.statefulSets.delete
• container.statefulSets.get
• container.statefulSets.getScale
• container.statefulSets.getStatus
• container.statefulSets.list
• container.statefulSets.update
• container.statefulSets.updateScale
• container.statefulSets.updateStatus

container.storageClasses.*

• container.storageClasses.create
• container.storageClasses.delete
• container.storageClasses.get
• container.storageClasses.list
• container.storageClasses.update

container.storageStates.*

• container.storageStates.create
• container.storageStates.delete
• container.storageStates.get
• container.storageStates.getStatus
• container.storageStates.list
• container.storageStates.update
• container.storageStates.updateStatus

container.storageVersionMigrations.*

• container.storageVersionMigrations.create
• container.storageVersionMigrations.delete
• container.storageVersionMigrations.get
• container.storageVersionMigrations.getStatus
• container.storageVersionMigrations.list
• container.storageVersionMigrations.update
• container.storageVersionMigrations.updateStatus

container.subjectAccessReviews.*

• container.subjectAccessReviews.create
• container.subjectAccessReviews.list

container.thirdPartyObjects.*

• container.thirdPartyObjects.create
• container.thirdPartyObjects.delete
• container.thirdPartyObjects.get
• container.thirdPartyObjects.list
• container.thirdPartyObjects.update

container.thirdPartyResources.*

• container.thirdPartyResources.create
• container.thirdPartyResources.delete
• container.thirdPartyResources.get
• container.thirdPartyResources.list
• container.thirdPartyResources.update

container.updateInfos.*

• container.updateInfos.create
• container.updateInfos.delete
• container.updateInfos.get
• container.updateInfos.list
• container.updateInfos.update

container.validatingWebhookConfigurations.*

• container.validatingWebhookConfigurations.create
• container.validatingWebhookConfigurations.delete
• container.validatingWebhookConfigurations.get
• container.validatingWebhookConfigurations.list
• container.validatingWebhookConfigurations.update

container.volumeAttachments.*

• container.volumeAttachments.create
• container.volumeAttachments.delete
• container.volumeAttachments.get
• container.volumeAttachments.getStatus
• container.volumeAttachments.list
• container.volumeAttachments.update
• container.volumeAttachments.updateStatus

container.volumeSnapshotClasses.*

• container.volumeSnapshotClasses.create
• container.volumeSnapshotClasses.delete
• container.volumeSnapshotClasses.get
• container.volumeSnapshotClasses.list
• container.volumeSnapshotClasses.update

container.volumeSnapshotContents.*

• container.volumeSnapshotContents.create
• container.volumeSnapshotContents.delete
• container.volumeSnapshotContents.get
• container.volumeSnapshotContents.getStatus
• container.volumeSnapshotContents.list
• container.volumeSnapshotContents.update
• container.volumeSnapshotContents.updateStatus

container.volumeSnapshots.*

• container.volumeSnapshots.create
• container.volumeSnapshots.delete
• container.volumeSnapshots.get
• container.volumeSnapshots.getStatus
• container.volumeSnapshots.list
• container.volumeSnapshots.update
• container.volumeSnapshots.updateStatus

gkehub.gateway.*

• gkehub.gateway.delete
• gkehub.gateway.generateCredentials
• gkehub.gateway.get
• gkehub.gateway.patch
• gkehub.gateway.post
• gkehub.gateway.put
• gkehub.gateway.stream

gkehub.locations.*

• gkehub.locations.get
• gkehub.locations.list

monitoring.monitoredResourceDescriptors.*

• monitoring.monitoredResourceDescriptors.get
• monitoring.monitoredResourceDescriptors.list

trafficdirector.*

• trafficdirector.networks.getConfigs
• trafficdirector.networks.reportMetrics