| # Licensed to the Apache Software Foundation (ASF) under one or more |
| # contributor license agreements. See the NOTICE file distributed with |
| # this work for additional information regarding copyright ownership. |
| # The ASF licenses this file to You under the Apache License, Version 2.0 |
| # (the "License"); you may not use this file except in compliance with |
| # the License. You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| # This file is auto-generated by generate_roles.py. |
| # Do not edit manually. |
| |
| # This file was generated on 2026-01-29 22:47:50 UTC |
| |
| description: This is the beam_writer role |
| permissions: |
| - bigquery.datasets.create |
| - bigquery.tables.export |
| - bigquery.tables.get |
| - bigquery.tables.getData |
| - bigquery.tables.list |
| - bigquerymigration.translation.translate |
| - cloudkms.cryptoKeyVersions.get |
| - cloudkms.cryptoKeyVersions.list |
| - cloudkms.cryptoKeys.get |
| - cloudkms.cryptoKeys.getIamPolicy |
| - cloudkms.cryptoKeys.list |
| - cloudkms.ekmConfigs.get |
| - cloudkms.ekmConfigs.getIamPolicy |
| - cloudkms.ekmConnections.get |
| - cloudkms.ekmConnections.getIamPolicy |
| - cloudkms.ekmConnections.list |
| - cloudkms.ekmConnections.verifyConnectivity |
| - cloudkms.importJobs.get |
| - cloudkms.importJobs.getIamPolicy |
| - cloudkms.importJobs.list |
| - cloudkms.kajPolicyConfigs.get |
| - cloudkms.keyHandles.create |
| - cloudkms.keyHandles.get |
| - cloudkms.keyHandles.list |
| - cloudkms.keyRings.get |
| - cloudkms.keyRings.getIamPolicy |
| - cloudkms.keyRings.list |
| - cloudkms.keyRings.listEffectiveTags |
| - cloudkms.keyRings.listTagBindings |
| - cloudkms.locations.generateRandomBytes |
| - cloudkms.locations.get |
| - cloudkms.locations.list |
| - cloudkms.operations.get |
| - cloudkms.projects.showEffectiveAutokeyConfig |
| - cloudkms.projects.showEffectiveKajEnrollmentConfig |
| - cloudkms.projects.showEffectiveKajPolicyConfig |
| - cloudkms.protectedResources.search |
| - cloudkms.singleTenantHsmInstanceProposals.get |
| - cloudkms.singleTenantHsmInstanceProposals.list |
| - cloudkms.singleTenantHsmInstances.get |
| - cloudkms.singleTenantHsmInstances.list |
| - cloudsql.instances.executeSql |
| - cloudsql.instances.login |
| - container.apiServices.create |
| - container.apiServices.update |
| - container.apiServices.updateStatus |
| - container.auditSinks.create |
| - container.auditSinks.update |
| - container.backendConfigs.create |
| - container.backendConfigs.update |
| - container.bindings.create |
| - container.certificateSigningRequests.create |
| - container.certificateSigningRequests.update |
| - container.certificateSigningRequests.updateStatus |
| - container.configMaps.create |
| - container.configMaps.update |
| - container.cronJobs.create |
| - container.cronJobs.update |
| - container.cronJobs.updateStatus |
| - container.csiDrivers.create |
| - container.csiDrivers.update |
| - container.csiNodeInfos.create |
| - container.csiNodeInfos.update |
| - container.csiNodes.create |
| - container.csiNodes.update |
| - container.customResourceDefinitions.create |
| - container.customResourceDefinitions.update |
| - container.customResourceDefinitions.updateStatus |
| - container.daemonSets.create |
| - container.daemonSets.update |
| - container.daemonSets.updateStatus |
| - container.deployments.create |
| - container.deployments.getScale |
| - container.deployments.rollback |
| - container.deployments.update |
| - container.deployments.updateScale |
| - container.deployments.updateStatus |
| - container.endpointSlices.create |
| - container.endpointSlices.update |
| - container.endpoints.create |
| - container.endpoints.update |
| - container.events.create |
| - container.events.update |
| - container.frontendConfigs.create |
| - container.frontendConfigs.update |
| - container.horizontalPodAutoscalers.create |
| - container.horizontalPodAutoscalers.update |
| - container.horizontalPodAutoscalers.updateStatus |
| - container.ingresses.create |
| - container.ingresses.update |
| - container.ingresses.updateStatus |
| - container.jobs.create |
| - container.jobs.update |
| - container.jobs.updateStatus |
| - container.leases.create |
| - container.leases.update |
| - container.limitRanges.create |
| - container.limitRanges.update |
| - container.localSubjectAccessReviews.create |
| - container.managedCertificates.create |
| - container.managedCertificates.update |
| - container.namespaces.create |
| - container.namespaces.update |
| - container.namespaces.updateStatus |
| - container.networkPolicies.create |
| - container.networkPolicies.update |
| - container.nodes.create |
| - container.nodes.proxy |
| - container.nodes.update |
| - container.nodes.updateStatus |
| - container.persistentVolumeClaims.create |
| - container.persistentVolumeClaims.update |
| - container.persistentVolumeClaims.updateStatus |
| - container.persistentVolumes.create |
| - container.persistentVolumes.update |
| - container.persistentVolumes.updateStatus |
| - container.podDisruptionBudgets.create |
| - container.podDisruptionBudgets.update |
| - container.podDisruptionBudgets.updateStatus |
| - container.podTemplates.create |
| - container.podTemplates.update |
| - container.pods.attach |
| - container.pods.create |
| - container.pods.evict |
| - container.pods.exec |
| - container.pods.portForward |
| - container.pods.proxy |
| - container.pods.update |
| - container.pods.updateStatus |
| - container.priorityClasses.create |
| - container.priorityClasses.update |
| - container.replicaSets.create |
| - container.replicaSets.update |
| - container.replicaSets.updateScale |
| - container.replicaSets.updateStatus |
| - container.replicationControllers.create |
| - container.replicationControllers.update |
| - container.replicationControllers.updateScale |
| - container.replicationControllers.updateStatus |
| - container.resourceQuotas.create |
| - container.resourceQuotas.update |
| - container.resourceQuotas.updateStatus |
| - container.runtimeClasses.create |
| - container.runtimeClasses.update |
| - container.secrets.create |
| - container.secrets.get |
| - container.secrets.list |
| - container.secrets.update |
| - container.serviceAccounts.create |
| - container.serviceAccounts.createToken |
| - container.serviceAccounts.update |
| - container.services.create |
| - container.services.proxy |
| - container.services.update |
| - container.services.updateStatus |
| - container.statefulSets.create |
| - container.statefulSets.update |
| - container.statefulSets.updateScale |
| - container.statefulSets.updateStatus |
| - container.storageClasses.create |
| - container.storageClasses.update |
| - container.storageStates.create |
| - container.storageStates.update |
| - container.storageStates.updateStatus |
| - container.storageVersionMigrations.create |
| - container.storageVersionMigrations.update |
| - container.storageVersionMigrations.updateStatus |
| - container.subjectAccessReviews.create |
| - container.thirdPartyObjects.create |
| - container.thirdPartyObjects.update |
| - container.updateInfos.create |
| - container.updateInfos.update |
| - container.volumeAttachments.create |
| - container.volumeAttachments.update |
| - container.volumeAttachments.updateStatus |
| - container.volumeSnapshotClasses.create |
| - container.volumeSnapshotClasses.update |
| - container.volumeSnapshotContents.create |
| - container.volumeSnapshotContents.update |
| - container.volumeSnapshotContents.updateStatus |
| - container.volumeSnapshots.create |
| - container.volumeSnapshots.update |
| - container.volumeSnapshots.updateStatus |
| - dataform.commentThreads.get |
| - dataform.commentThreads.list |
| - dataform.comments.get |
| - dataform.comments.list |
| - dataform.compilationResults.get |
| - dataform.compilationResults.list |
| - dataform.compilationResults.query |
| - dataform.config.get |
| - dataform.folders.create |
| - dataform.folders.get |
| - dataform.folders.getIamPolicy |
| - dataform.folders.queryContents |
| - dataform.locations.get |
| - dataform.locations.list |
| - dataform.operations.get |
| - dataform.operations.list |
| - dataform.releaseConfigs.get |
| - dataform.releaseConfigs.list |
| - dataform.repositories.computeAccessTokenStatus |
| - dataform.repositories.create |
| - dataform.repositories.fetchHistory |
| - dataform.repositories.fetchRemoteBranches |
| - dataform.repositories.get |
| - dataform.repositories.getIamPolicy |
| - dataform.repositories.list |
| - dataform.repositories.queryDirectoryContents |
| - dataform.repositories.readFile |
| - dataform.teamFolders.get |
| - dataform.teamFolders.getIamPolicy |
| - dataform.workflowConfigs.get |
| - dataform.workflowConfigs.list |
| - dataform.workflowInvocations.get |
| - dataform.workflowInvocations.list |
| - dataform.workflowInvocations.query |
| - dataform.workspaces.fetchFileDiff |
| - dataform.workspaces.fetchFileGitStatuses |
| - dataform.workspaces.fetchGitAheadBehind |
| - dataform.workspaces.get |
| - dataform.workspaces.getIamPolicy |
| - dataform.workspaces.list |
| - dataform.workspaces.queryDirectoryContents |
| - dataform.workspaces.readFile |
| - dataform.workspaces.searchFiles |
| - dataplex.aspectTypes.get |
| - dataplex.aspectTypes.getIamPolicy |
| - dataplex.aspectTypes.list |
| - dataplex.assetActions.list |
| - dataplex.assets.get |
| - dataplex.assets.getIamPolicy |
| - dataplex.assets.list |
| - dataplex.content.get |
| - dataplex.content.getIamPolicy |
| - dataplex.content.list |
| - dataplex.dataAssets.get |
| - dataplex.dataAssets.list |
| - dataplex.dataAttributeBindings.get |
| - dataplex.dataAttributeBindings.getIamPolicy |
| - dataplex.dataAttributeBindings.list |
| - dataplex.dataAttributes.get |
| - dataplex.dataAttributes.getIamPolicy |
| - dataplex.dataAttributes.list |
| - dataplex.dataProducts.get |
| - dataplex.dataProducts.getIamPolicy |
| - dataplex.dataProducts.list |
| - dataplex.dataTaxonomies.get |
| - dataplex.dataTaxonomies.getIamPolicy |
| - dataplex.dataTaxonomies.list |
| - dataplex.datascans.get |
| - dataplex.datascans.getData |
| - dataplex.datascans.getIamPolicy |
| - dataplex.datascans.list |
| - dataplex.entities.get |
| - dataplex.entities.list |
| - dataplex.entries.get |
| - dataplex.entries.getData |
| - dataplex.entries.list |
| - dataplex.entryGroups.export |
| - dataplex.entryGroups.get |
| - dataplex.entryGroups.getIamPolicy |
| - dataplex.entryGroups.list |
| - dataplex.entryLinks.get |
| - dataplex.entryTypes.get |
| - dataplex.entryTypes.getIamPolicy |
| - dataplex.entryTypes.list |
| - dataplex.environments.get |
| - dataplex.environments.getIamPolicy |
| - dataplex.environments.list |
| - dataplex.glossaries.get |
| - dataplex.glossaries.getIamPolicy |
| - dataplex.glossaries.list |
| - dataplex.glossaryCategories.get |
| - dataplex.glossaryCategories.list |
| - dataplex.glossaryTerms.get |
| - dataplex.glossaryTerms.list |
| - dataplex.lakeActions.list |
| - dataplex.lakes.get |
| - dataplex.lakes.getIamPolicy |
| - dataplex.lakes.list |
| - dataplex.locations.get |
| - dataplex.locations.list |
| - dataplex.metadataJobs.get |
| - dataplex.metadataJobs.list |
| - dataplex.operations.get |
| - dataplex.operations.list |
| - dataplex.partitions.get |
| - dataplex.partitions.list |
| - dataplex.projects.search |
| - dataplex.tasks.get |
| - dataplex.tasks.getIamPolicy |
| - dataplex.tasks.list |
| - dataplex.zoneActions.list |
| - dataplex.zones.get |
| - dataplex.zones.getIamPolicy |
| - dataplex.zones.list |
| - datastore.entities.allocateIds |
| - datastore.entities.create |
| - datastore.entities.update |
| - trafficdirector.networks.reportMetrics |
| role_id: beam_writer |
| stage: GA |
| title: beam_writer |