Skip to content

Commit efef113

Browse files
authored
Update policy for instance-family (#420)
Previous version mentioned the policy is 'to read instance-family', This lets you list but not attach volumes. The 'use instance-family' is needed, according to: https://docs.oracle.com/en-us/iaas/Content/Identity/Concepts/commonpolicies.htm#volume-admins-manage-volumes-and-backups
1 parent 359bc8f commit efef113

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

docs/src/gs/install-csi.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Oracle recommends using [Instance principals][instance-principals] to be used by
1313
following policies in the dynamic group for CSI to be able to talk to various OCI Services.
1414

1515
```
16-
allow dynamic-group [your dynamic group name] to read instance-family in compartment [your compartment name]
16+
allow dynamic-group [your dynamic group name] to use instance-family in compartment [your compartment name]
1717
allow dynamic-group [your dynamic group name] to use virtual-network-family in compartment [your compartment name]
1818
allow dynamic-group [your dynamic group name] to manage volume-family in compartment [your compartment name]
1919
```
@@ -100,4 +100,4 @@ Follow the guides below to create PVCs based on the service you require:
100100

101101

102102
[oci-ccm-release-page]: https://github.com/oracle/oci-cloud-controller-manager/releases
103-
[instance-principals]: https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm
103+
[instance-principals]: https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/callingservicesfrominstances.htm

0 commit comments

Comments
 (0)