https://docs.openshift.com/container-platform/4.13/installing/installing_gcp/installing-gcp-account.html#minimum-required-permissions-ipi-gcp-xpn does not list the `compute.firewalls.create` permission, which leads to cluster installation failures if the host project firewall has not been configured to allow traffic. The doc should be updated to clarify that either (1) the account needs `compute.firewalls.create` or (2) the host project firewall must be configured properly and firewall tags must be specified in the install config.