You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+3Lines changed: 3 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,6 +2,8 @@
2
2
3
3
[](https://cloud.oracle.com/resourcemanager/stacks/create?zipUrl=https://github.com/oracle-quickstart/oci-hpc/archive/refs/heads/master.zip)
4
4
5
+
## Create a dynamic group
6
+
For customer tenancies, check or create dynamic group. In OCI Console, navigate to Identity->Domains->Default domain->Dynamic groups, create a dynamic group e.g. instance_principal with `Any {instance.compartment.id = 'ocid1.compartment.oc1.example-ocid'}`. Though this provides a liberal access for the instance principal, it is recommended to narrow the scope depending on customer's security posture requirements. If you change the name of policy, be sure make the change in the policy examples that follow this section. Currently they all assume that you named the dynamic group as `instance_principal`.
5
7
6
8
## Policies to deploy the stack:
7
9
```
@@ -24,6 +26,7 @@ Allow dynamic-group instance_principal to manage instance-family in compartment
24
26
Allow dynamic-group instance_principal to use virtual-network-family in compartment compartmentName
25
27
Allow dynamic-group instance_principal to use volumes in compartment compartmentName
26
28
Allow dynamic-group instance_principal to manage dns in compartment compartmentName
29
+
Allow dynamic-group instance_principal to read metrics in compartment compartmentName
0 commit comments