[Docs] Docs on how to assign project-domain-specific permissions

[samhita-alla]

Description

We need docs on how to define a service account at the project-domain level and annotate it with an env-user-role.

Reference Slack thread: https://discuss.flyte.org/t/2404214/yes-but-i-don-t-think-it-works-across-accounts-i-e-eks-is-de

Are you sure this issue hasn't been raised already?

• Yes

Have you read the Code of Conduct?

• Yes

[samhita-alla]

cc: @pmahindrakar-oss

[26tanishabanik]

@samhita-alla , please assign this issue to me

[26tanishabanik]

@samhita-alla , I have gone through the discussion, but not able to figure out, where from should I refer for the documentation, also, I am not able to join the slack community

[samhita-alla]

@26tanishabanik, you can join our Slack using this link.

@pmahindrakar-oss, what's the best place to document the above discussion -- which section in https://docs.flyte.org/en/latest/deployment/aws/manual.html page precisely? I'm confused between (4) in https://docs.flyte.org/en/latest/deployment/aws/manual.html#installing-flyte and https://docs.flyte.org/en/latest/deployment/aws/manual.html#flyte-user-role.

[Thusal06]

Can you assign me? @samhita-alla

[samhita-alla]

@Thusal06, please go ahead and create a PR. It's first-come, first-serve.

[pmahindrakar-oss]

@samhita-alla this should go in the manual installation doc where we specify creating only one flyte-user-role across environments currently. For GCP we create each one separate https://docs.flyte.org/en/latest/deployment/gcp/manual.html#time-for-helm
ie gsa-production, gsa-staging and gsa-development for each of three namespaces.

[github-actions]

Hello 👋, This issue has been inactive for over 9 months. To help maintain a clean and focused backlog, we'll be marking this issue as stale and will close the issue if we detect no activity in the next 7 days. Thank you for your contribution and understanding! 🙏

[github-actions]

Hello 👋, This issue has been inactive for over 9 months and hasn't received any updates since it was marked as stale. We'll be closing this issue for now, but if you believe this issue is still relevant, please feel free to reopen it. Thank you for your contribution and understanding! 🙏