Skip to content

Commit 67ee417

Browse files
committed
Update doc for needed permissions.
1 parent cca2ba9 commit 67ee417

File tree

1 file changed

+4
-5
lines changed

1 file changed

+4
-5
lines changed

docs/configure_cluster_profile.md

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,8 +17,8 @@
1717

1818
1. Specify `Cluster URL`.
1919

20-
1. Optionally specify `Namespace`. If not provided, GoCD agents will be
21-
launched in the default Kubernetes namespace. Note: If you have multiple
20+
1. Optionally specify `Namespace`. If not provided, the plugin will launch GoCD
21+
agent pods in the default Kubernetes namespace. Note: If you have multiple
2222
GoCD servers with cluster profiles pointing to the same Kubernetes cluster,
2323
make sure that the namespace used by each GoCD server is different.
2424
Otherwise, the plugin of one GoCD server will end up terminating pods
@@ -29,14 +29,13 @@
2929

3030
| Resource | Actions |
3131
| -------------- | ----------- |
32-
| nodes | list, get |
32+
| nodes | list |
3333
| events | list |
34-
| namespace | list, get |
3534
| pods, pods/log | * |
3635

3736
If the plugin is using a non-default namespace, then the pods and pods/log permissions
3837
can be limited to that namespace (using a role + role binding), and the plugin
39-
will still work. All other permissions need to be attached at the cluster
38+
will still work. Nodes list and events list need to be attached at the cluster
4039
level (using a cluster role + cluster role binding) regardless of the
4140
namespace chosen.
4241

0 commit comments

Comments
 (0)