For production environments you should create a service account and/or role for Codefresh access.

The minimum permissions Codefresh needs to work with the cluster are the following:

For production environments, create a service account and/or role for Codefresh access.

Codefresh needs these minimum permissions to work with the cluster:

{% highlight yaml %}

{% endraw %}

{% endhighlight %}

Note that these permissions will only allow Codefresh to read the cluster resources and populate the respective dashboards. You need to give more privileges for actual deployments. For more information see the[Kubernetes RBAC documentation page](https://kubernetes.io/docs/reference/access-authn-authz/rbac/).

Note that these permissions will only allow Codefresh to read the cluster resources and populate the respective dashboards. You need to give more privileges for actual deployments. For more information see the[Kubernetes RBAC documentation page](https://kubernetes.io/docs/reference/access-authn-authz/rbac/){:target="\_blank"}.

Here is an example with role + service account + binding.

{% endraw %}

{% endhighlight %}

1. Select the appropriate cluster if you have more than one:

{% highlight shell %}

{% raw %}

kubectl config use-context <my-cluster-name>

{% endraw %}

{% endhighlight %}

Create the Codefresh user/role:

1.Create the Codefresh user/role:

{% highlight shell %}

{% endraw %}

{% endhighlight %}

Finally run the following commands and copy-paste theresult toeach Codefresh field in the UI:

1.Finally run the following commands, and copy-paste theresults tothe respective Codefresh field in the UI:

{% highlight shell %}