{"action":"created","comment":{"url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/comments/207584513","pull_request_review_id":143231280,"id":207584513,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIwNzU4NDUxMw==","diff_hunk":"@@ -0,0 +1,58 @@\n+---\n+layout: single\n+title:  \"Pipeline Permissions\"\n+sidebar:\n+  nav: setup\n+---\n+\n+{% include alpha version=\"1.9\" %}\n+\n+{% include toc %}\n+\n+Pipeline permissions enable automatically triggered pipelines to modify\n+resources in protected accounts and applications. They are an alternative\n+to manually managing Fiat Service Accounts.\n+\n+Previously, a Spinnaker operator would have to first create a Fiat Service\n+account with the correct permissions. A user could then specify the service\n+account as the `RunAsUser` per automated trigger. With Pipeline permissions,\n+the flow is simpler -- a user only has to specify the set of roles in the\n+pipeline specification. You can read more about how pipeline permissions\n+works [here](https://github.com/spinnaker/spinnaker/issues/3037).\n+\n+## Enabling pipeline permissions\n+\n+Pipeline permissions are currently disabled by default and can be enabled by\n+setting the following flags:\n+\n+* For Orca, add the following to  `orca-local.yml`\n+\n+```yaml\n+tasks:\n+  useManagedServiceAccounts: true\n+```\n+\n+* For Deck, add the following to `settings-local.js`\n+\n+```js\n+window.spinnakerSettings.feature.managedServiceAccounts = true;\n+```\n+\n+## Using pipeline permissions\n+The permissions selector will show up automatically when an automated trigger\n+is added in the pipeline configuration page in the UI. You can add any of the\n+roles that you currently have. Once you add role to the pipeline, only users\n+who have _all of the specified roles_ can view, edit, or execute the pipeline.","path":"setup/security/authorization/pipeline-permissions/index.md","position":null,"original_position":45,"commit_id":"f556b82147ed1475a08eba4cb2561c0b80e16c68","original_commit_id":"c383e00a61c16aacf1e71a260692dbdbb2a3c52e","user":{"login":"dibyom","id":3316877,"node_id":"MDQ6VXNlcjMzMTY4Nzc=","avatar_url":"https://avatars2.githubusercontent.com/u/3316877?v=4","gravatar_id":"","url":"https://api.github.com/users/dibyom","html_url":"https://github.com/dibyom","followers_url":"https://api.github.com/users/dibyom/followers","following_url":"https://api.github.com/users/dibyom/following{/other_user}","gists_url":"https://api.github.com/users/dibyom/gists{/gist_id}","starred_url":"https://api.github.com/users/dibyom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dibyom/subscriptions","organizations_url":"https://api.github.com/users/dibyom/orgs","repos_url":"https://api.github.com/users/dibyom/repos","events_url":"https://api.github.com/users/dibyom/events{/privacy}","received_events_url":"https://api.github.com/users/dibyom/received_events","type":"User","site_admin":false},"body":"Can view but not edit or execute.","created_at":"2018-08-03T15:34:57Z","updated_at":"2018-08-03T15:34:58Z","html_url":"https://github.com/spinnaker/spinnaker.github.io/pull/943#discussion_r207584513","pull_request_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/comments/207584513"},"html":{"href":"https://github.com/spinnaker/spinnaker.github.io/pull/943#discussion_r207584513"},"pull_request":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943"}},"in_reply_to_id":206635555},"pull_request":{"url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943","id":205158536,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA1MTU4NTM2","html_url":"https://github.com/spinnaker/spinnaker.github.io/pull/943","diff_url":"https://github.com/spinnaker/spinnaker.github.io/pull/943.diff","patch_url":"https://github.com/spinnaker/spinnaker.github.io/pull/943.patch","issue_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/943","number":943,"state":"open","locked":false,"title":"docs(security/authz): Add docs for pipeline permissions.","user":{"login":"dibyom","id":3316877,"node_id":"MDQ6VXNlcjMzMTY4Nzc=","avatar_url":"https://avatars2.githubusercontent.com/u/3316877?v=4","gravatar_id":"","url":"https://api.github.com/users/dibyom","html_url":"https://github.com/dibyom","followers_url":"https://api.github.com/users/dibyom/followers","following_url":"https://api.github.com/users/dibyom/following{/other_user}","gists_url":"https://api.github.com/users/dibyom/gists{/gist_id}","starred_url":"https://api.github.com/users/dibyom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dibyom/subscriptions","organizations_url":"https://api.github.com/users/dibyom/orgs","repos_url":"https://api.github.com/users/dibyom/repos","events_url":"https://api.github.com/users/dibyom/events{/privacy}","received_events_url":"https://api.github.com/users/dibyom/received_events","type":"User","site_admin":false},"body":"Docs for https://github.com/spinnaker/spinnaker/issues/3037","created_at":"2018-07-31T15:46:22Z","updated_at":"2018-08-03T15:34:58Z","closed_at":null,"merged_at":null,"merge_commit_sha":"352789fa4e9335b878732104c1fe6df61bddd9cc","assignee":null,"assignees":[],"requested_reviewers":[{"login":"nhayes","id":2678856,"node_id":"MDQ6VXNlcjI2Nzg4NTY=","avatar_url":"https://avatars1.githubusercontent.com/u/2678856?v=4","gravatar_id":"","url":"https://api.github.com/users/nhayes","html_url":"https://github.com/nhayes","followers_url":"https://api.github.com/users/nhayes/followers","following_url":"https://api.github.com/users/nhayes/following{/other_user}","gists_url":"https://api.github.com/users/nhayes/gists{/gist_id}","starred_url":"https://api.github.com/users/nhayes/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nhayes/subscriptions","organizations_url":"https://api.github.com/users/nhayes/orgs","repos_url":"https://api.github.com/users/nhayes/repos","events_url":"https://api.github.com/users/nhayes/events{/privacy}","received_events_url":"https://api.github.com/users/nhayes/received_events","type":"User","site_admin":false},{"login":"ttomsu","id":13141550,"node_id":"MDQ6VXNlcjEzMTQxNTUw","avatar_url":"https://avatars2.githubusercontent.com/u/13141550?v=4","gravatar_id":"","url":"https://api.github.com/users/ttomsu","html_url":"https://github.com/ttomsu","followers_url":"https://api.github.com/users/ttomsu/followers","following_url":"https://api.github.com/users/ttomsu/following{/other_user}","gists_url":"https://api.github.com/users/ttomsu/gists{/gist_id}","starred_url":"https://api.github.com/users/ttomsu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ttomsu/subscriptions","organizations_url":"https://api.github.com/users/ttomsu/orgs","repos_url":"https://api.github.com/users/ttomsu/repos","events_url":"https://api.github.com/users/ttomsu/events{/privacy}","received_events_url":"https://api.github.com/users/ttomsu/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943/commits","review_comments_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943/comments","review_comment_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/comments{/number}","comments_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/943/comments","statuses_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/statuses/f556b82147ed1475a08eba4cb2561c0b80e16c68","head":{"label":"dibyom:svc_accts","ref":"svc_accts","sha":"f556b82147ed1475a08eba4cb2561c0b80e16c68","user":{"login":"dibyom","id":3316877,"node_id":"MDQ6VXNlcjMzMTY4Nzc=","avatar_url":"https://avatars2.githubusercontent.com/u/3316877?v=4","gravatar_id":"","url":"https://api.github.com/users/dibyom","html_url":"https://github.com/dibyom","followers_url":"https://api.github.com/users/dibyom/followers","following_url":"https://api.github.com/users/dibyom/following{/other_user}","gists_url":"https://api.github.com/users/dibyom/gists{/gist_id}","starred_url":"https://api.github.com/users/dibyom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dibyom/subscriptions","organizations_url":"https://api.github.com/users/dibyom/orgs","repos_url":"https://api.github.com/users/dibyom/repos","events_url":"https://api.github.com/users/dibyom/events{/privacy}","received_events_url":"https://api.github.com/users/dibyom/received_events","type":"User","site_admin":false},"repo":{"id":136495493,"node_id":"MDEwOlJlcG9zaXRvcnkxMzY0OTU0OTM=","name":"spinnaker.github.io","full_name":"dibyom/spinnaker.github.io","owner":{"login":"dibyom","id":3316877,"node_id":"MDQ6VXNlcjMzMTY4Nzc=","avatar_url":"https://avatars2.githubusercontent.com/u/3316877?v=4","gravatar_id":"","url":"https://api.github.com/users/dibyom","html_url":"https://github.com/dibyom","followers_url":"https://api.github.com/users/dibyom/followers","following_url":"https://api.github.com/users/dibyom/following{/other_user}","gists_url":"https://api.github.com/users/dibyom/gists{/gist_id}","starred_url":"https://api.github.com/users/dibyom/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dibyom/subscriptions","organizations_url":"https://api.github.com/users/dibyom/orgs","repos_url":"https://api.github.com/users/dibyom/repos","events_url":"https://api.github.com/users/dibyom/events{/privacy}","received_events_url":"https://api.github.com/users/dibyom/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/dibyom/spinnaker.github.io","description":"spinnaker documentation site","fork":true,"url":"https://api.github.com/repos/dibyom/spinnaker.github.io","forks_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/forks","keys_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/teams","hooks_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/hooks","issue_events_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/events","assignees_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/tags","blobs_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/languages","stargazers_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/stargazers","contributors_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/contributors","subscribers_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/subscribers","subscription_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/subscription","commits_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/merges","archive_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/downloads","issues_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/labels{/name}","releases_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/dibyom/spinnaker.github.io/deployments","created_at":"2018-06-07T15:17:05Z","updated_at":"2018-07-30T14:58:40Z","pushed_at":"2018-08-03T15:34:38Z","git_url":"git://github.com/dibyom/spinnaker.github.io.git","ssh_url":"git@github.com:dibyom/spinnaker.github.io.git","clone_url":"https://github.com/dibyom/spinnaker.github.io.git","svn_url":"https://github.com/dibyom/spinnaker.github.io","homepage":null,"size":60364,"stargazers_count":0,"watchers_count":0,"language":"HTML","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"spinnaker:master","ref":"master","sha":"70a082fc8c4f8fcb976affb094c669556cc5bf70","user":{"login":"spinnaker","id":7634182,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MzQxODI=","avatar_url":"https://avatars1.githubusercontent.com/u/7634182?v=4","gravatar_id":"","url":"https://api.github.com/users/spinnaker","html_url":"https://github.com/spinnaker","followers_url":"https://api.github.com/users/spinnaker/followers","following_url":"https://api.github.com/users/spinnaker/following{/other_user}","gists_url":"https://api.github.com/users/spinnaker/gists{/gist_id}","starred_url":"https://api.github.com/users/spinnaker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spinnaker/subscriptions","organizations_url":"https://api.github.com/users/spinnaker/orgs","repos_url":"https://api.github.com/users/spinnaker/repos","events_url":"https://api.github.com/users/spinnaker/events{/privacy}","received_events_url":"https://api.github.com/users/spinnaker/received_events","type":"Organization","site_admin":false},"repo":{"id":86486443,"node_id":"MDEwOlJlcG9zaXRvcnk4NjQ4NjQ0Mw==","name":"spinnaker.github.io","full_name":"spinnaker/spinnaker.github.io","owner":{"login":"spinnaker","id":7634182,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MzQxODI=","avatar_url":"https://avatars1.githubusercontent.com/u/7634182?v=4","gravatar_id":"","url":"https://api.github.com/users/spinnaker","html_url":"https://github.com/spinnaker","followers_url":"https://api.github.com/users/spinnaker/followers","following_url":"https://api.github.com/users/spinnaker/following{/other_user}","gists_url":"https://api.github.com/users/spinnaker/gists{/gist_id}","starred_url":"https://api.github.com/users/spinnaker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/spinnaker/subscriptions","organizations_url":"https://api.github.com/users/spinnaker/orgs","repos_url":"https://api.github.com/users/spinnaker/repos","events_url":"https://api.github.com/users/spinnaker/events{/privacy}","received_events_url":"https://api.github.com/users/spinnaker/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/spinnaker/spinnaker.github.io","description":"spinnaker documentation site","fork":false,"url":"https://api.github.com/repos/spinnaker/spinnaker.github.io","forks_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/forks","keys_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/keys{/key_id}","collaborators_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/teams","hooks_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/hooks","issue_events_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/events{/number}","events_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/events","assignees_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/assignees{/user}","branches_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/branches{/branch}","tags_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/tags","blobs_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/git/refs{/sha}","trees_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/git/trees{/sha}","statuses_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/statuses/{sha}","languages_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/languages","stargazers_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/stargazers","contributors_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/contributors","subscribers_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/subscribers","subscription_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/subscription","commits_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/commits{/sha}","git_commits_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/git/commits{/sha}","comments_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/comments{/number}","issue_comment_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/comments{/number}","contents_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/contents/{+path}","compare_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/compare/{base}...{head}","merges_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/merges","archive_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/downloads","issues_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues{/number}","pulls_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls{/number}","milestones_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/milestones{/number}","notifications_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/labels{/name}","releases_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/releases{/id}","deployments_url":"https://api.github.com/repos/spinnaker/spinnaker.github.io/deployments","created_at":"2017-03-28T17:09:59Z","updated_at":"2018-08-03T15:11:20Z","pushed_at":"2018-08-03T15:34:40Z","git_url":"git://github.com/spinnaker/spinnaker.github.io.git","ssh_url":"git@github.com:spinnaker/spinnaker.github.io.git","clone_url":"https://github.com/spinnaker/spinnaker.github.io.git","svn_url":"https://github.com/spinnaker/spinnaker.github.io","homepage":null,"size":60358,"stargazers_count":20,"watchers_count":20,"language":"HTML","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":165,"mirror_url":null,"archived":false,"open_issues_count":72,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":165,"open_issues":72,"watchers":20,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943"},"html":{"href":"https://github.com/spinnaker/spinnaker.github.io/pull/943"},"issue":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/943"},"comments":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/issues/943/comments"},"review_comments":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943/comments"},"review_comment":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/pulls/943/commits"},"statuses":{"href":"https://api.github.com/repos/spinnaker/spinnaker.github.io/statuses/f556b82147ed1475a08eba4cb2561c0b80e16c68"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"dibyom"}}