From 959f86786494ba805e109a54808950cea17c951c Mon Sep 17 00:00:00 2001 From: cblmemo Date: Sun, 17 Sep 2023 17:38:55 -0700 Subject: [PATCH] add minimal for gcp --- docs/source/cloud-setup/cloud-permissions/aws.rst | 2 +- docs/source/cloud-setup/cloud-permissions/gcp.rst | 15 +++++++++++---- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/docs/source/cloud-setup/cloud-permissions/aws.rst b/docs/source/cloud-setup/cloud-permissions/aws.rst index cee56477f27..c20a349f534 100644 --- a/docs/source/cloud-setup/cloud-permissions/aws.rst +++ b/docs/source/cloud-setup/cloud-permissions/aws.rst @@ -117,7 +117,7 @@ AWS accounts can be attached with a policy that limits the permissions of the ac "Resource": "*" } -5. **Optional**: To enable open ports on AWS cluster, you need to add the following permissions to the policy above as well. +5. **Optional**: To enable opening ports on AWS cluster, you need to add the following permissions to the policy above as well. .. code-block:: json diff --git a/docs/source/cloud-setup/cloud-permissions/gcp.rst b/docs/source/cloud-setup/cloud-permissions/gcp.rst index bad25e5e27b..32b41833d3f 100644 --- a/docs/source/cloud-setup/cloud-permissions/gcp.rst +++ b/docs/source/cloud-setup/cloud-permissions/gcp.rst @@ -125,9 +125,16 @@ User compute.images.get compute.images.delete -7. Click **Create** to create the role. -8. Go back to the "IAM" tab and click on **GRANT ACCESS**. -9. Fill in the email address of the user in the “Add principals” section, and select ``minimal-skypilot-role`` in the “Assign roles” section. Click **Save**. +7. **Optional**: To enable opening ports on GCP cluster, you need to have the following permissions for the role as well: + +.. code-block:: text + + compute.firewalls.list + compute.firewalls.update + +8. Click **Create** to create the role. +9. Go back to the "IAM" tab and click on **GRANT ACCESS**. +10. Fill in the email address of the user in the “Add principals” section, and select ``minimal-skypilot-role`` in the “Assign roles” section. Click **Save**. .. image:: ../../images/screenshots/gcp/create-iam.png @@ -135,7 +142,7 @@ User :align: center :alt: GCP Grant Access -10. The user should receive an invitation to the project and should be able to setup SkyPilot by following the instructions in :ref:`Installation `. +11. The user should receive an invitation to the project and should be able to setup SkyPilot by following the instructions in :ref:`Installation `. .. note::