We would like to restrict a shared network to a specific domain.
Currently, to achieve this, we add network rbac for each project in the domain.

We have tried to make an network rbac with “-target-all-projects” but it is not limited to the “-target-project-domain” option and it's visible to all domains.

Is there a solution for restricting a shared network to a specific domain (allowing all projects current and future of this domain) ?
Or is it mandatory to add an rbac for each project ?

Currently we have three domains:
Default
Domain A
Domain B

We would like to share a network for all Domain A projects.

Describe the impact to you or the business
Multiplying the number of network rbac and always modify quota network.