Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-22759

Document required permissions for CNV UI

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • Console
    • None

      For multicluster support in the CNV UI, we are dependent on the fine-grained-rbac-preview feature in ACM.

      Current setup involves:

      1. Following instructions at https://github.com/stolostron/rhacm-docs/blob/2.14_stage/secure_cluster/fine_grain_rbac_ui.adoc to enable the feature and create basic prerequisite role bindings
      2. Bind specific users to clusters and namespaces using the Access control UI in ACM, using the built-in kubevirt roles like kubevirt.io:admin, kubevirt.io:edit, and kubevirt.io:view

      We need to determine what other permissions are required by the CNV UI for a full user experience. Currently we know the Pod for a VM will not show with this set of permissions, and there is optional permission required to show Nodes.

              upalatuc@redhat.com Ugo Palatucci
              rh-ee-kcormier Kevin Cormier
              Guohua Ouyang Guohua Ouyang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: