Skip to content

Commit 18cf6c2

Browse files
Merge pull request 'added info on GCP roles' (#7) from fix/pymcs/module-imports into main
Reviewed-on: https://git.myzel.io/PyMC/PyMC-Server/pulls/7
2 parents 9be395c + 2e318e9 commit 18cf6c2

File tree

1 file changed

+23
-0
lines changed

1 file changed

+23
-0
lines changed

README.md

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,29 @@ pip3 install .
4040

4141
Follow through the rest of the GCP configuration in your terminal.
4242

43+
4. In Order to let PyMC-Server manage cloud resources for you, you need to grant your Google IAM account the permissions to execute all actions neccessary.
44+
45+
Go to [Google IAM Console](https://console.cloud.google.com/iam-admin/iam) to access and edit your IAM permissions.
46+
47+
Next, create a new role and name it e.g. `pymcs-server-role`.
48+
49+
>Note: we will be granting overly permissive rules for convenience of your setup not taking too long.
50+
>For production usage it is strictly neccessary that you review the permissions given. Please refer to [GCP: Minimal Permissions](https://skypilot.readthedocs.io/en/latest/cloud-setup/cloud-permissions/gcp.html#minimal-permissions) for more information on how to setup secure and fine grained permissions.
51+
52+
Add the following permissions to your newly created role. At the time of writing this document Google offers a search bar where each permission needs to be entered. The table below the search bar will display the roles under this name, and you can select them all together with the first checkbox in the table (header).
53+
54+
```
55+
roles/browser
56+
roles/compute.admin
57+
roles/iam.serviceAccountAdmin
58+
roles/iam.serviceAccountUser
59+
roles/serviceusage.serviceUsageConsumer
60+
roles/storage.admin
61+
roles/iam.securityAdmin
62+
```
63+
64+
65+
>Note: If you use PyMC-Server as part of an organization, your GCP admin might have setup a role already (e.g. `pymc-server-role `) and you can easily attach your user to it.
4366
4467
### Status of your deployments
4568

0 commit comments

Comments
 (0)