Arthur Berger: Adding continuous delivery permissions (#5759)

cs_cicd.md

@@ -2,7 +2,7 @@
 
 copyright:
   years: 2014, 2020
-lastupdated: "2020-06-26"
+lastupdated: "2020-07-07"
 
 keywords: kubernetes, iks
 
@@ -78,6 +78,13 @@ Adopt a DevOps approach by using {{site.data.keyword.deliverypipelinelong}}, whi
 Want a more detailed walkthrough? Check out the [Set up a DevOps delivery pipeline for your app](/docs/containers?topic=containers-tutorial-byoc-kube) tutorial. This tutorial shows you how to create a DevOps toolchain in IBM Cloud, integrate it with your GitHub repository and configure delivery pipeline stages that automatically build a container image from your Dockerfile, push it to IBM Cloud Container Registry, and deploy your app to a cluster.
 {: tip}
 
+Before you begin, make sure that you have at least the following permissions in {{site.data.keyword.cloud_notm}} IAM:
+*  **Editor** platform role and **Writer** service role to the **Kubernetes Service** cluster. For more information, see [User access permissions](/docs/containers?topic=containers-access_reference).
+*  **Viewer** platform role to the resource group of the cluster where you want to create the toolchain.
+*  **Editor** platform role to the **Toolchain** service (note that this service is separate than **Continuous Delivery**).
+
+To add a continuous delivery pipeline to your cluster:
+
 1. From the [cluster dashboard](https://cloud.ibm.com/kubernetes/clusters), select the cluster for which you want to set up a continuous delivery pipeline.
 2. Select the **DevOps** tab.
 3. Click **Create a toolchain**.

cs_tutorials_byoc.md

@@ -2,7 +2,7 @@
 
 copyright:
   years: 2014, 2020
-lastupdated: "2020-06-09"
+lastupdated: "2020-07-07"
 
 keywords: kubernetes, iks
 
@@ -71,7 +71,13 @@ This tutorial is intended for experienced software developers and DevOps enginee
 * Containerize your app and store the Dockerfile and related app code in a GitHub repository. For more information about how to create a Dockerfile, see the [Dockerfile reference](https://docs.docker.com/engine/reference/builder/){: external}.
 * [Install the {{site.data.keyword.cloud_notm}} CLI, the {{site.data.keyword.containerlong_notm}} CLI plug-in, and the Kubernetes CLI](/docs/containers?topic=containers-cs_cli_install#cs_cli_install).
 * [Set up a namespace in {{site.data.keyword.registrylong_notm}}](/docs/Registry?topic=Registry-getting-started) to store your container image.
-* Create a [classic](/docs/containers?topic=containers-clusters#clusters_standard) or [VPC](/docs/containers?topic=containers-clusters#clusters_vpc_standard) cluster to deploy and run your app.
+* Get the details of a [classic](/docs/containers?topic=containers-clusters#clusters_standard) or [VPC](/docs/containers?topic=containers-clusters#clusters_vpc_standard) cluster to deploy and run your app.
+*  Make sure that you have at least the following permissions in {{site.data.keyword.cloud_notm}} IAM:
+   *  **Editor** platform role and **Writer** service role to the **Kubernetes Service** cluster. For more information, see [User access permissions](/docs/containers?topic=containers-access_reference).
+   *  **Writer** service role to the **Container Registry** service.
+   *  **Viewer** platform role to the resource group of the cluster where you want to create the toolchain.
+   *  **Editor** platform role to the **Toolchain** service.
+   *  **Editor** platform role to the **Continuous Delivery** service.
 * Create or retrieve an [{{site.data.keyword.cloud_notm}} API key](/docs/iam?topic=iam-userapikey).
 
 ## Lesson 1: Create a {{site.data.keyword.contdelivery_short}} service and a DevOps toolchain skeleton