Skip to content

Commit 4a4613d

Browse files
docs(k8s): update information for iam/rbac (#5278)
* docs(k8s): update docs rbac * docs(k8s): update rbac information * fix(k8s): fix typo * Apply suggestions from code review Co-authored-by: Jessica <[email protected]> --------- Co-authored-by: Jessica <[email protected]>
1 parent 4b91708 commit 4a4613d

File tree

2 files changed

+25
-16
lines changed

2 files changed

+25
-16
lines changed

pages/kubernetes/how-to/connect-cluster-kubectl.mdx

Lines changed: 5 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -30,22 +30,11 @@ If your Organization uses IAM to control access, ensure that you or your group/a
3030
- `KubernetesFullAccess` (or `KubernetesReadOnly`, depending on your needs):
3131
Grants you the ability to manage (or list/read) Kubernetes clusters, nodes, and related actions in your Scaleway Project.
3232

33-
To create a new policy with the correct permission sets, follow these steps:
34-
35-
### Configure an IAM policy
36-
37-
1. **Create a new policy**: Navigate to the **Policies** tab in your Organization’s IAM console and create a new policy.
38-
2. **Add your user (or group/application)**: Assign your user, group, or application as the **Principal**.
39-
3. **Add an IAM rule**:
40-
- **Scope**: Set to **Access to resources** and specify the desired Project(s).
41-
- **Permission Sets**: Include the following as needed:
42-
- `KubernetesFullAccess` for full cluster management.
43-
- `KubernetesReadOnly` for read-only access.
44-
4. Click **Validate** and then **Create Policy**.
45-
<Message type="tip">
46-
- Refer to our [policy and permission sets documentation](/iam/reference-content/permission-sets/) for more details.
47-
- Scaleway may **automatically generate IAM resources**, such as applications, groups and policies. Refer to [auto-generated IAM resources](/iam/reference-content/auto-generated-iam-resources/) for further information.
48-
</Message>
33+
If you have not yet configured IAM on your account, you can generate a `kubeconfig` file with IAM and the required permission sets from the Scaleway console after creating a cluster.
34+
35+
<Message type="tip">
36+
For detailed information about the configuration of IAM policies for your Kubernetes clusters, refer to our dedicated documentation [Setting IAM permissions and implementing RBAC on a cluster](/kubernetes/reference-content/set-iam-permissions-and-implement-rbac/).
37+
</Message>
4938

5039
## Accessing the cluster
5140

pages/kubernetes/reference-content/set-iam-permissions-and-implement-rbac.mdx

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,26 @@ An [IAM policy](/iam/concepts/#policy) defines the permissions for users, groups
3131

3232
The combination of IAM and Kubernetes RBAC allows you to define fine-grained access levels for cluster users.
3333

34+
<Message type="tip">
35+
For more information on how to download and use the `kubeconfig` file with IAM permissions, refer to [How to connect to a Kubernetes Kapsule cluster with kubectl](/kubernetes/how-to/connect-cluster-kubectl/).
36+
</Message>
37+
38+
### Configuring an IAM policy
39+
40+
To create a new policy with the correct permission sets using the [Scaleway console](https://console.scaleway.com/), follow these steps:
41+
42+
1. **Create a new policy**: Navigate to the **Policies** tab in your Organization’s IAM console and [create a new policy](/iam/how-to/create-policy/).
43+
2. **Add your user (or group/application)**: Assign your user, group, or application as the **Principal**.
44+
3. **Add an IAM rule**:
45+
- **Scope**: Set to **Access to resources** and specify the desired Project(s).
46+
- **Permission Sets**: Include the following, as needed:
47+
- `KubernetesFullAccess` for full cluster management.
48+
- `KubernetesReadOnly` for read-only access.
49+
4. Click **Validate** and then **Create Policy**.
50+
<Message type="tip">
51+
- Refer to our [policy and permission sets documentation](/iam/reference-content/permission-sets/) for more details.
52+
- Scaleway may **automatically generate IAM resources**, such as applications, groups and policies. Refer to [auto-generated IAM resources](/iam/reference-content/auto-generated-iam-resources/) for further information.
53+
</Message>
3454

3555
### Mapping IAM permission sets to Kubernetes groups
3656

0 commit comments

Comments
 (0)