When I try to create a managed certficate through a service account I get the error
managedcertificates.networking.gke.io "..." is forbidden: User "..." cannot get resource "managedcertificates" in API group "networking.gke.io" ... Required "container.managedCertificates.get" permission.
I tried to add the
container.managedCertificates.get permission to the service account with a custom role, but there are no "container.managedCertificates.*"-permissions available at all which I could select.