gcp-iam-catalog Roles Permissions
🔐

roles/container.hostServiceAgentUser

Title Kubernetes Engine Host Service Agent User
Stage GA
Role Type Predefined
Permissions 16
Description Allows the Kubernetes Engine service account in the host project to configure shared network resources for cluster management. Also gives access to inspect the firewall rules in the host project, and configure Cloud DNS resources.
🔍
compute.firewalls.get
compute.networks.get
container.hostServiceAgent.use
dns.networks.bindDNSResponsePolicy
dns.networks.bindPrivateDNSPolicy
dns.networks.bindPrivateDNSZone
dns.responsePolicies.create
dns.responsePolicies.delete
dns.responsePolicies.get
dns.responsePolicies.list
dns.responsePolicies.update
dns.responsePolicyRules.create
dns.responsePolicyRules.delete
dns.responsePolicyRules.get
dns.responsePolicyRules.list
dns.responsePolicyRules.update
🔍