Uploaded image for project: 'Red Hat Advanced Cluster Management'
  1. Red Hat Advanced Cluster Management
  2. ACM-22793

RBAC suggestions for Console hosted control plane

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Normal Normal
    • ACM 2.15.0
    • ACM 2.15.0
    • Console
    • None
    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • False
    • ACM Console Train 31 - 2
    • Moderate
    • None

      When the UI determines if the hosted control plane feature is enabled for displaying the hosted control plane creation wizard, it requires the user to have access to the following resources.

       

      1. MultiClusterEngine CR
      2. ManagedClusterAddOn CRs

       

      If the user does not have access to these resources, the UI displays this even though the hosted control plane features are enabled in MCE.

       

       

      One suggestion is to use a different service account on behalf of the user to check these required resources so that we can avoid having to give the non-admin user explicit access to MCE resources.

              rbrunopi Randy Bruno-Piverger
              rokejungrh Roke Jung
              David Huynh David Huynh
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: