You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+23Lines changed: 23 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -40,6 +40,29 @@ pip3 install .
40
40
41
41
Follow through the rest of the GCP configuration in your terminal.
42
42
43
+
4. In Order to let PyMC-Server manage cloud resources for you, you need to grant your Google IAM account the permissions to execute all actions neccessary.
44
+
45
+
Go to [Google IAM Console](https://console.cloud.google.com/iam-admin/iam) to access and edit your IAM permissions.
46
+
47
+
Next, create a new role and name it e.g. `pymcs-server-role`.
48
+
49
+
>Note: we will be granting overly permissive rules for convenience of your setup not taking too long.
50
+
>For production usage it is strictly neccessary that you review the permissions given. Please refer to [GCP: Minimal Permissions](https://skypilot.readthedocs.io/en/latest/cloud-setup/cloud-permissions/gcp.html#minimal-permissions) for more information on how to setup secure and fine grained permissions.
51
+
52
+
Add the following permissions to your newly created role. At the time of writing this document Google offers a search bar where each permission needs to be entered. The table below the search bar will display the roles under this name, and you can select them all together with the first checkbox in the table (header).
53
+
54
+
```
55
+
roles/browser
56
+
roles/compute.admin
57
+
roles/iam.serviceAccountAdmin
58
+
roles/iam.serviceAccountUser
59
+
roles/serviceusage.serviceUsageConsumer
60
+
roles/storage.admin
61
+
roles/iam.securityAdmin
62
+
```
63
+
64
+
65
+
>Note: If you use PyMC-Server as part of an organization, your GCP admin might have setup a role already (e.g. `pymc-server-role `) and you can easily attach your user to it.
0 commit comments