-
Task
-
Resolution: Done
-
Undefined
-
None
-
None
For multicluster support in the CNV UI, we are dependent on the fine-grained-rbac-preview feature in ACM.
Current setup involves:
- Following instructions at https://github.com/stolostron/rhacm-docs/blob/2.14_stage/secure_cluster/fine_grain_rbac_ui.adoc to enable the feature and create basic prerequisite role bindings
- Bind specific users to clusters and namespaces using the Access control UI in ACM, using the built-in kubevirt roles like kubevirt.io:admin, kubevirt.io:edit, and kubevirt.io:view
We need to determine what other permissions are required by the CNV UI for a full user experience. Currently we know the Pod for a VM will not show with this set of permissions, and there is optional permission required to show Nodes.