- Artifact Registry Writer
- Compute Admin
- Kubernetes Engine Admin
- Logging Admin
- Monitoring Admin
- Service Account User
- Storage Admin
- Vertex AI Administrator
- Filestore Editor (This role is neccessary if you want to run
storage createcommand with--type=gcpfilestore) - Project IAM Admin or Security Admin (This role is necessary if you create a cluster with
--managed-mldiagnosticsto assign required roles to the default Compute Engine service account)