gcloud ssh

==================
gcloud ssh attempt
==================
eric@instance-2:~$ gcloud compute ssh --zone us-east1-b instance-1
ERROR: (gcloud.compute.ssh) Could not fetch resource:
 - Required 'compute.instances.get' permission for 'projects/kubernetes201-star-242343/zones/us-east1-b/instances/instance-1'
 
========
iam role
========
According to https://cloud.google.com/compute/docs/access/iam, roles/compute.networkViewer, should provide the correct access.

=============
gcloud config
=============
eric@instance-2:~$ gcloud config list
[core]
account = ssh-automation@kubernetes201-star-242343.iam.gserviceaccount.com
disable_usage_reporting = True
project = kubernetes201-star-242343

=======
Policy 
=======
{
      "members": [
        "serviceAccount:ssh-automation@kubernetes201-star-242343.iam.gserviceaccount.com"
      ],
      "role": "roles/compute.instanceAdmin.v1"
    },
    {
      "members": [
        "serviceAccount:ssh-automation@kubernetes201-star-242343.iam.gserviceaccount.com"
      ],
      "role": "roles/compute.networkViewer"
    },
    {
      "members": [
        "serviceAccount:ssh-automation@kubernetes201-star-242343.iam.gserviceaccount.com"
      ],
      "role": "roles/compute.osLogin"
    },
    {
      "members": [
        "serviceAccount:ssh-automation@kubernetes201-star-242343.iam.gserviceaccount.com"
      ],
      "role": "roles/compute.viewer"
    },