Docs: EKS minimum permissions required

liqotech · Apr 14, 2023 · 1a9ff8e · 1a9ff8e
1 parent eeb8c2b
commit 1a9ff8e
Showing 1 changed file with 37 additions and 0 deletions.
diff --git a/docs/installation/install.md b/docs/installation/install.md
@@ -135,6 +135,43 @@ In a nutshell, after having installed the CLI, you have to set up your identity:
 aws configure
 ```
 
+You can install Liqo even if you are not an EKS administrator.
+The minimum **IAM** permissions required by a user to install Liqo are the following:
+
+```json
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "eks:DescribeCluster",
+                "iam:CreateUser",
+                "iam:CreateAccessKey",
+                "ec2:DescribeVpcs"
+            ],
+            "Resource": "*"
+        },
+        {
+            "Effect": "Allow",
+            "Action": [
+                "iam:CreatePolicy",
+                "iam:GetPolicyVersion",
+                "iam:GetPolicy",
+                "iam:AttachUserPolicy",
+                "iam:GetUser",
+                "iam:TagUser",
+                "iam:ListAccessKeys"
+            ],
+            "Resource": [
+                "arn:aws:iam::*:user/liqo-*",
+                "arn:aws:iam::*:policy/liqo-*"
+            ]
+        }
+    ]
+}
+```
+
 Before continuing, you should export a few variables about the properties of your cluster:
 
 ```bash