Advertising sustains the DA. Ads are hidden for members. Join today

Requirements

Last updated on
2 March 2023
  • PHP 8.0 or Higher (128 MB Memory or higher)
  • MySQL 5.7 or higher _OR_ MariaDB 10.3 or higher
  • Drupal 9.4 or higher
  • Cloud 5.x
    • This branch is still under development. Any volunteer effort is greatly appreciated.
    • Currently, AWS, K8s, OpenStack,  VMware and Terraform Cloud are the Cloud module that is working.
    • Future support includes GCP and Azure.
  • AWS
    • Mandatory IAM permissions for creating a cloud service provider are as follows:
          {
        "Version": "2012-10-17",
        "Statement": [
            {
                "Sid": "Mandatory",
                "Effect": "Allow",
                "Action": [
                    "ec2:DescribeAddresses",
                    "ec2:DescribeAvailabilityZones",
                    "ec2:DescribeIamInstanceProfileAssociations",
                    "ec2:DescribeCarrierGateways",
                    "ec2:DescribeFlowLogs",
                    "ec2:DescribeImageAttribute",
                    "ec2:DescribeImages",
                    "ec2:DescribeInstanceAttribute",
                    "ec2:DescribeInstances",
                    "ec2:DescribeInternetGateways",
                    "ec2:DescribeKeyPairs",
                    "ec2:DescribeLaunchTemplates",
                    "ec2:DescribeLaunchTemplateVersions",
                    "ec2:DescribeNetworkInterfaces",
                    "ec2:DescribeSecurityGroups",
                    "ec2:DescribeSnapshots",
                    "ec2:DescribeSubnets",
                    "ec2:DescribeTransitGateways",
                    "ec2:DescribeVolumes",
                    "ec2:DescribeVpcPeeringConnections",
                    "ec2:DescribeVpcs",
                    "iam:ListInstanceProfiles"
                ],
                "Resource": "*"
            }
        ]
    }
    • Optional IAM permissionsfor creating a cloud service provider are as follows:
      {
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "Optional",
            "Effect": "Allow",
            "Action": [
                "cloudwatch:GetMetricData",
                "ec2:AuthorizeSecurityGroupEgress",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:CreateKeyPair",
                "ec2:CreateLaunchTemplate",
                "ec2:CreateNetworkInterface",
                "ec2:CreateSecurityGroup",
                "ec2:CreateSnapshot",
                "ec2:CreateSubnet",
                "ec2:CreateTags",
                "ec2:CreateVpc",
                "ec2:GetConsoleOutput",
                "ec2:RevokeSecurityGroupEgress",
                "ec2:RevokeSecurityGroupIngress"
            ],
            "Resource": "*"
        }
    ]
}
    • The policies required to build Cloud Orchestrator consisting of EC2 + ElastiCache + RDS with CloudFormation templates are as follows:
      AmazonEC2FullAccess
AmazonECS_FullAccess
AmazonRDSDataFullAccess
AmazonRDSFullAccess
AmazonRoute53DomainsFullAccess
AmazonRoute53FullAccess
AWSCloudFormationFullAccess
AmazonS3FullAccess
AmazonVPCFullAccess
IAMFullAccess
AWSLambda_FullAccess
AmazonElastiCacheFullAccess
AmazonEC2ContainerRegistryFullAccess
AmazonRDSFullAccess
SecretsManagerReadWrite
AmazonElasticFileSystemFullAccess
CloudWatchLogsFullAccess
AWSCertificateManagerFullAccess

Help improve this page

Page status: No known problems

You can: