Background

This task implements the approved changes from ACM-28461 (Research and propose ACM virt roles reorganization for better UX).

ACM ships 4 custom virt roles:

• kubevirt.io-acm-hub:admin
• kubevirt.io-acm-hub:view
• kubevirt.io-acm-managed:admin
• kubevirt.io-acm-managed:view

Implementation Area

Fine-grained RBAC backend component

The code changes will be made in the fine-grained RBAC backend, specifically in:

• multiclusterhub-operator - acm-roles-addontemplate.yaml

Scope

Based on the approved proposal from ACM-28461:

• Reorganize and rename virt roles for better user experience
• Align naming with actual virt use cases rather than ACM-specific concepts
• Follow Kubernetes RBAC best practices
• Role permissions will largely remain the same

Tasks

1. Review approved proposal from ACM-28461
2. Update role definitions in multiclusterhub-operator fine-grained RBAC templates
3. Update any related documentation
4. Test role changes
5. Get code review approval

Definition of Done

• [ ] Role changes implemented per approved proposal
• [ ] Unit tests updated/added
• [ ] Code review completed
• [ ] QE validation passed
• [ ] Documentation updated