Permissions required for cluster-wide read-only access

If you want to create a user that has read-only access for the whole cluster, you need to add the following statement to /etc/caringo/cloudgateway/policy.json

{
      "Sid": "readonlyuser",
      "Resource": "/*",
      "Effect": "Allow",
      "Principal": {
        "user": [
          "readuser"
        ]
      },
      "Action": [
        "GetDomain",
        "GetBucket",
        "GetObject",
        "ListDomain",
        "ListBucket",
        "GetPolicy",
        "ListEtc",
        "GetTenant",
        "ListTenants",
        "ListDomains"
    ]
}