Skip to content

Commit 660c0b7

Browse files
Fix OKE policy doc (#274)
1 parent 764e32d commit 660c0b7

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

docs/src/gs/iam/iam-oke.md

+4-2
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ These steps are applicable if you intend to run your management cluster using [O
44

55
1. [Create a user in OCI](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managingusers.htm) e.g. `iaas_oke_usr`
66
1. [Create a group in OCI](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managinggroups.htm) e.g. `iaas_oke_grp` and add the user `iaas_oke_usr` to this group
7-
1. Create a policy in OCI and add the following policies:
7+
1. Create a policy in OCI and add the following policies(Please read [OKE Policy Configuration Doc][oke-policy] for more fine grained policies):
88
- `Allow group iaas_oke_grp to manage dynamic groups`
99
- `Allow group iaas_oke_grp to manage virtual-network-family in <compartment>`
10-
- `Allow group iaas_oke_grp to manage cluster family in <compartment>`
10+
- `Allow group iaas_oke_grp to manage cluster-family in <compartment>`
1111
- `Allow group iaas_oke_grp to manage instance-family in <compartment>`
1212

1313
where `<compartment>` is the name of the OCI compartment of the management cluster. Refer to the [OCI documentation](https://docs.oracle.com/en-us/iaas/Content/Identity/Tasks/managingcompartments.htm) if you have not created a compartment yet.
@@ -16,5 +16,7 @@ where `<compartment>` is the name of the OCI compartment of the management clust
1616
You should not create your management cluster in the root compartment.
1717
```
1818

19+
1920
[kind]: https://kind.sigs.k8s.io/
2021
[oke]: https://docs.oracle.com/en-us/iaas/Content/ContEng/home.htm
22+
[oke-policy]: https://docs.oracle.com/en-us/iaas/Content/ContEng/Concepts/contengpolicyconfig.htm

0 commit comments

Comments
 (0)