10000 add namespaced admin permission recomendation · marcoderama/circleci-docs@42e4cd0 · GitHub
[go: up one dir, main page]

Skip to content

Commit 42e4cd0

Browse files
author
Chris Johnson
committed
add namespaced admin permission recomendation
1 parent 36c0c86 commit 42e4cd0

File tree

1 file changed

+6
-9
lines changed

1 file changed

+6
-9
lines changed

jekyll/_cci2/server/installation/phase-1-prerequisites.adoc

Lines changed: 6 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -122,16 +122,13 @@ CircleCI server installs into an existing Kubernetes cluster. The application us
122122
| 1.22 - 1.23
123123
|===
124124

125-
Creating a Kubernetes cluster is your responsibility. Please note:
126-
127-
* You must have appropriate permissions to list, create, edit, and delete pods in your cluster. Run this command to verify your permissions:
128-
+
129-
[source,shell]
130-
----
131-
kubectl auth can-i <list|create|edit|delete> pods
132-
----
133125
* There are no requirements regarding VPC setup or disk size for your cluster. It is recommended that you set up a new VPC rather than use an existing one.
134126

127+
**Minimum Permission Requirments:**
128+
129+
A user with at least Admin permissions for the namespace CircleCI will be installed into is required.
130+
131+
135132
ifndef::env-gcp[]
136133

137134
[#eks]
@@ -435,7 +432,7 @@ CircleCI server listens on a number of ports which need to be configured dependi
435432
* Nomad server [TCP 4647]
436433
* Output processor [gRPC 8585]
437434

438-
Depending on your requirements you may choose to terminate TLS for only the frontend/api-gateway or provide TLS for services listening on all the ports.
435+
Depending on your requirements you may choose to terminate TLS for only the frontend/api-gateway or provide TLS for services listening on all the ports.
439436

440437
NOTE: The Output Processor service communicates using gRPC and requires the proxy or loadbalancer to support HTTP/2.
441438

0 commit comments

Comments
 (0)
0