gcp-iam-catalog Roles Permissions
🔐

roles/container.cloudKmsKeyUser

Title Kubernetes Engine KMS Crypto Key User
Stage GA
Role Type Predefined
Permissions 8
Description Allow the Kubernetes Engine service agent in the cluster project to call KMS with user provided crypto keys to sign payloads.
🔍
cloudkms.cryptoKeyVersions.get
cloudkms.cryptoKeyVersions.useToSign
cloudkms.cryptoKeyVersions.useToVerify
cloudkms.cryptoKeyVersions.viewPublicKey
cloudkms.cryptoKeys.get
cloudkms.locations.get
cloudkms.locations.list
resourcemanager.projects.get
🔍