Merge branch '18631-shell-login-sync'
[arvados.git] / doc / install / crunch2-cloud / install-dispatch-cloud.html.textile.liquid
index cb3143b020a25b1e889d5284b7b49a444fcf626d..0ed7a599fc79df23528e78fd0691d9a14c2bf0d7 100644 (file)
@@ -74,20 +74,19 @@ Add or update the following portions of your cluster configuration file, @config
 </code></pre>
 </notextile>
 
-h4. NVIDIA GPU support
+h4(#GPUsupport). NVIDIA GPU support
 
 To specify instance types with NVIDIA GPUs, you must include an additional @CUDA@ section:
 
 <notextile>
-<pre><code>    Services:
-    InstanceTypes:
+<pre><code>    InstanceTypes:
       g4dn:
         ProviderType: g4dn.xlarge
         VCPUs: 4
         RAM: 16GiB
         IncludedScratch: 125GB
         Price: 0.56
-       CUDA:
+        CUDA:
           DriverVersion: "11.4"
           HardwareCapability: "7.5"
           DeviceCount: 1
@@ -121,6 +120,32 @@ The <span class="userinput">ImageID</span> value is the compute node image that
 </code></pre>
 </notextile>
 
+Example policy for the IAM role used by the cloud dispatcher:
+
+<notextile>
+<pre>
+{
+    "Version": "2012-10-17",
+    "Id": "arvados-dispatch-cloud policy",
+    "Statement": [
+        {
+            "Effect": "Allow",
+            "Action": [
+                "iam:PassRole",
+                "ec2:DescribeKeyPairs",
+                "ec2:ImportKeyPair",
+                "ec2:RunInstances",
+                "ec2:DescribeInstances",
+                "ec2:CreateTags",
+                "ec2:TerminateInstances"
+            ],
+            "Resource": "*"
+        }
+    ]
+}
+</pre>
+</notextile>
+
 h4. Minimal configuration example for Azure
 
 Using managed disks: