apiVersion: cloudcredential.openshift.io/v1
kind: CredentialsRequest
metadata:
  name: openshift-gcp-pd-csi-driver-operator
  namespace: openshift-cloud-credential-operator
  annotations:
    include.release.openshift.io/self-managed-high-availability: "true"
    include.release.openshift.io/single-node-developer: "true"
spec:
  secretRef:
    name: gcp-pd-cloud-credentials
    namespace: openshift-cluster-csi-drivers
  providerSpec:
    apiVersion: cloudcredential.openshift.io/v1
    kind: GCPProviderSpec
    predefinedRoles:
      # FIXME: find a replacement for instanceAdmin, since the CSI driver
      # only needs "compute.instances.[get|attachDisk|DetachDisk]"
      - roles/compute.instanceAdmin
      - roles/compute.storageAdmin
      - roles/iam.serviceAccountUser
    # If set to true, don't check whether the requested
    # roles have the necessary services enabled
    skipServiceCheck: true
