Version 1.12 . This version is no longer supported. For information about how to upgrade to version 1.13, see Upgrading Anthos on bare metal in the 1.13 documentation. For more information about supported and unsupported versions, see the Version history page in the latest documentation.
Send feedback
RBAC permissions for system components
Stay organized with collections
Save and categorize content based on your preferences.
Version 1.12 keyboard_arrow_down
Google Distributed Cloud deploys Pods to your nodes that have elevated
RBAC
permissions such as the ability to modify all Deployments and to read all
cluster Secrets. These permissions are required for Google Distributed Cloud to
function correctly.
The following table lists all Google Distributed Cloud components with elevated
permissions:
Note: Select features like VM Runtime on GDC or multi-NIC for
pods require some of these system components. These features are disabled by
default and the related components aren't active unless the feature is enabled.
ais
anet-operator
anthos-cluster-operator
anthos-multinet-controller
cap-controller-manager
capi-controller-manager
capi-kubeadm-bootstrap-controller-manager
cdi-operator
cert-manager-cainjector
cert-manager-webhook
cert-manager
cluster-metrics-webhook
csi-snapshot-controller
istio-ingress
istiod
kube-state-metrics
localpv
metallb-controller
metrics-server-operator
metrics-server
network-controller-manager
sp-anthos-static-provisioner
stackdriver-operator
virt-api
virt-controller
virt-handler
virt-operator
vm-controller-controller-manager
vmruntime-controller-manager
Send feedback
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License , and code samples are licensed under the Apache 2.0 License . For details, see the Google Developers Site Policies . Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2024-09-26 UTC.
[{
"type": "thumb-down",
"id": "hardToUnderstand",
"label":"Hard to understand"
},{
"type": "thumb-down",
"id": "incorrectInformationOrSampleCode",
"label":"Incorrect information or sample code"
},{
"type": "thumb-down",
"id": "missingTheInformationSamplesINeed",
"label":"Missing the information/samples I need"
},{
"type": "thumb-down",
"id": "otherDown",
"label":"Other"
}]
[{
"type": "thumb-up",
"id": "easyToUnderstand",
"label":"Easy to understand"
},{
"type": "thumb-up",
"id": "solvedMyProblem",
"label":"Solved my problem"
},{
"type": "thumb-up",
"id": "otherUp",
"label":"Other"
}]
Need to tell us more?
{"lastModified": "Last updated 2024-09-26 UTC."}
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2024-09-26 UTC."]]