Minimal Cloud Permissions

Note

The instructions below are completely optional and are not needed to get started with SkyPilot. These steps are for users who want to make SkyPilot use non-default, restricted permissions.

SkyPilot is designed to minimize cloud administration and setup steps. It should work out of the box for most users who own the root (admin) account of their clouds, if they follow the steps in Installation section.

However, in some cases, the cloud administrator may want to limit the permissions of the account used by SkyPilot. This is especially true if the user is using a shared cloud account. The following sections describe the permissions required by SkyPilot for each cloud provider.

Table of Contents

• AWS
  • Minimal Permissions
    • User Account
    • IAM Role Creation
  • Using a specific VPC
• GCP
  • Medium Permissions
  • Minimal Permissions
    • User
    • Service Account
    • Firewall Rules
  • Using a specific VPC
  • Using Internal IPs
    • Cloud NAT Setup
    • Force Enable Exteral IPs
• vSphere
  • Prepare Category & Tag
  • Create VM Storage Policies
  • Prepare VM image
  • References
• Kubernetes
  • Minimum Permissions Required for SkyPilot
    • Permissions for sky show-gpus
    • Permissions for Object Store Mounting
    • Permissions for using Ingress
  • Example using Custom Service Account