Cannot see clusters with roles/container.clusterViewer role [152592828]

Assigned

Feature Request

Status Update

No update yet.

Description

sz...@gmail.com

created issue #1

Mar 27, 2020 02:54PM

As opposed to its meaningful name and description found here (

https://cloud.google.com/iam/docs/understanding-roles) roles/container.clusterViewer predefined role provides not enough permissions to see clusters in a GCP project.

I've tried to attach more permissions to the user but adding roles/container.viewer is still not enough. After granting these permissions the Google Cloud Console displays that the authenticated user is not allowed to get/list the enabled APIs.

Finally attaching general project Viewer role solves our problem but I consider it going against least privilege principle.

I'd expect that cluster viewer role should contain all the necessary permissions in order to be able to see the clusters in a project.

Comments

md...@google.com <md...@google.com> #2Mar 27, 2020 10:09PM

Assigned to md...@google.com.

Thanks for the report. I will route this to the appropriate internal team and update this when I hear back from them.

sz...@gmail.com <sz...@gmail.com> #3Mar 30, 2020 07:59AM

One more detail, Data Layer event calls from the watch to the phone (running Android 13) do work on if the listener is in an Activity or Fragment.

md...@google.com <md...@google.com> #4Mar 31, 2020 11:15PM

Status: In Progress (Accepted) (reopened)

Also, I'm seeing this message in the Logcat:

"2022-06-12 18:47:15.156 1841-4562/? W/PackageManager: Intent does not match component's intent filter: Intent { act=com.google.android.gms.wearable.BIND_LISTENER"

md...@google.com <md...@google.com> Apr 2, 2020 12:21AM

Status: Won't Fix (Intended Behavior)

md...@google.com <md...@google.com> #5Apr 3, 2020 04:00AM

Status: Assigned (reopened)

Experiencing the same issues, please see my other report for any useful logs:

https://issuetracker.google.com/issues/235673375

ma...@google.com <ma...@google.com> Apr 4, 2020 12:20AM