Feature

 
ACM is developing a unified way to manage remote cluster infrastructure resources such as OpenShift Virtualization VMs, hosted clusters, etc and having pre-defined roles will help ACM and any individual that want to establish fine-grained RBAC for the users and admins in the organization.

HyperShift would include pre-defined roles so that users can bind users, groups and service accounts to specific roles to achieve fine-grained RBAC to manage a fleet of hosted clusters from ACM.

For example, there should be 3 different roles that have difference access levels.

• view
• edit
• admin

There could be different personas with these roles like:

• hosted cluster viewer, editor, admin
• nodepool viewer, editor, admin
• etc