doc: add a note on the best practice for API token usage

Signed-off-by: Paweł Wieczorek <[email protected]>
kernelci · Jul 26, 2023 · 15c745b · 15c745b
1 parent 66dc425
commit 15c745b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/doc/getting-started.md b/doc/getting-started.md
@@ -213,6 +213,11 @@ file which provides environment variables for the Docker containers:
 echo "KCI_API_TOKEN=<your token>" >> .env
 ```
 
+> **Note** Admin API token created in the previous section can be used for
+> initial Pipeline instance testing. In production environment the best
+> practice would be to create a separate (non-admin) user with required scopes
+> and generate a new API token for that user.
+
 ### Start docker-compose
 
 Then the pipeline can simply be started with docker-compose: