You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/kubernetes/how-to/connect-cluster-kubectl.mdx
+4-16Lines changed: 4 additions & 16 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -34,23 +34,11 @@ If your Organization uses IAM to control access, ensure that you or your group/a
34
34
-`KubernetesFullAccess` (or `KubernetesReadOnly`, depending on your needs):
35
35
Grants you the ability to manage (or list/read) Kubernetes clusters, nodes, and related actions in your Scaleway Project.
36
36
37
-
To create a new policy with the correct permission sets, follow these steps:
38
-
39
-
### Configure an IAM policy
40
-
41
-
1.**Create a new policy**: Navigate to the **Policies** tab in your Organization’s IAM console and create a new policy.
42
-
2.**Add your user (or group/application)**: Assign your user, group, or application as the **Principal**.
43
-
3.**Add an IAM rule**:
44
-
-**Scope**: Set to **Access to resources** and specify the desired Project(s).
45
-
-**Permission Sets**: Include the following as needed:
46
-
-`KubernetesFullAccess` for full cluster management.
47
-
-`KubernetesReadOnly` for read-only access.
48
-
4. Click **Validate** and then **Create Policy**.
49
-
<Messagetype="tip">
50
-
- Refer to our [policy and permission sets documentation](/iam/reference-content/permission-sets/) for more details.
51
-
- Scaleway may **automatically generate IAM resources**, such as applications, groups and policies. Refer to [auto-generated IAM resources](/iam/reference-content/auto-generated-iam-resources/) for further information.
52
-
</Message>
37
+
<Messagetype="tip">
38
+
If you do not have setup IAM for your account yet, you can generate a `kubeconfig` file with IAM after cluster creation from the Scaleway console.
39
+
</Message>
53
40
41
+
For detailed information about the configuration of IAM policies for your Kubernetes clusters, refer to our dedicated documentation [Setting IAM permissions and implementing RBAC on a cluster](/kubernetes/reference-content/set-iam-permissions-and-and-implement-rbac/).
54
42
## Accessing the cluster
55
43
56
44
You can use the Scaleway CLI to automatically retrieve (and merge) your `kubeconfig` file, then interact with your Kubernetes cluster.
Copy file name to clipboardExpand all lines: pages/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx
+20Lines changed: 20 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -35,6 +35,26 @@ An [IAM policy](/iam/concepts/#policy) defines the permissions for users, groups
35
35
36
36
The combination of IAM and Kubernetes RBAC allows you to define fine-grained access levels for cluster users.
37
37
38
+
<Messagetype="tip">
39
+
For more information how to download and use the `kubeconfig` file with IAM permissions, refer to [How to connect to a Kubernetes Kapsule cluster with kubectl](/kubernetes/how-to/connect-cluster-kubectl/).
40
+
</Message>
41
+
42
+
### Configuring an IAM policy
43
+
44
+
To create a new policy with the correct permission sets using the [Scaleway console](https://console.scaleway.com/), follow these steps:
45
+
46
+
1.**Create a new policy**: Navigate to the **Policies** tab in your Organization’s IAM console and create a new policy.
47
+
2.**Add your user (or group/application)**: Assign your user, group, or application as the **Principal**.
48
+
3.**Add an IAM rule**:
49
+
-**Scope**: Set to **Access to resources** and specify the desired Project(s).
50
+
-**Permission Sets**: Include the following as needed:
51
+
-`KubernetesFullAccess` for full cluster management.
52
+
-`KubernetesReadOnly` for read-only access.
53
+
4. Click **Validate** and then **Create Policy**.
54
+
<Messagetype="tip">
55
+
- Refer to our [policy and permission sets documentation](/iam/reference-content/permission-sets/) for more details.
56
+
- Scaleway may **automatically generate IAM resources**, such as applications, groups and policies. Refer to [auto-generated IAM resources](/iam/reference-content/auto-generated-iam-resources/) for further information.
57
+
</Message>
38
58
39
59
### Mapping IAM permission sets to Kubernetes groups
0 commit comments