gcp-iam-catalog Roles Permissions
🔐

roles/container.defaultNodeServiceAgent

Title Kubernetes Engine Default Node Service Agent
Stage GA
Role Type Service Agent
Permissions 11
Description Minimal set of permissions required by a GKE node to support standard capabilities such as logging and monitoring. Replaces the container.nodeServiceAgent role with a reduced permission set.
🔍
autoscaling.sites.writeMetrics
logging.logEntries.create
monitoring.metricDescriptors.create
monitoring.metricDescriptors.list
monitoring.timeSeries.create
monitoring.timeSeries.list
serviceusage.services.use
telemetry.metrics.write
telemetry.traces.write
trafficdirector.networks.getConfigs
trafficdirector.networks.reportMetrics
🔍