Kubernetes Metadata API roles and permissions

This page lists the IAM roles and permissions for Kubernetes Metadata API. To search through all roles and permissions, see the role and permission index.

Kubernetes Metadata API roles

Role	Permissions
Metadata Publisher ^Beta (roles/kubernetesmetadata.publisher) Publisher of Kubernetes clusters metadata	kubernetesmetadata.* kubernetesmetadata.metadata.config kubernetesmetadata.metadata.publish kubernetesmetadata.metadata.snapshot

Kubernetes Metadata API permissions

Permission	Included in roles
kubernetesmetadata.metadata.config	Owner (roles/owner) Editor (roles/editor) Viewer (roles/viewer) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Support User (roles/iam.supportUser) Metadata Publisher (roles/kubernetesmetadata.publisher) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
kubernetesmetadata.metadata.publish	Owner (roles/owner) Editor (roles/editor) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Metadata Publisher (roles/kubernetesmetadata.publisher) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)
kubernetesmetadata.metadata.snapshot	Owner (roles/owner) Editor (roles/editor) Anthos Multi-cloud Telemetry Writer (roles/gkemulticloud.telemetryWriter) Metadata Publisher (roles/kubernetesmetadata.publisher) Service agent roles Warning: Don't grant service agent roles to any principals except service agents. Anthos Multi-Cloud Container Service Agent (roles/gkemulticloud.containerServiceAgent) Edge Container Cluster Service Agent (roles/edgecontainer.clusterServiceAgent)