Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-6416

Enable HostedCluster and HostedControlPlane Deployment via WebUI with ManagedClusterSet Admin Role

XMLWordPrintable

    • None
    • Product / Portfolio Work
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request

      Enable HostedCluster and HostedControlPlane Deployment via WebUI with ManagedClusterSet Admin Role open-cluster-management:managedclusterset:admin

      2. What is the nature and description of the request?

      Users or groups with the clusterrole: open-cluster-management:managedclusterset:admin on an existing clusterset are allowed to create hostedcluster with hostedcontrolplane

      3. Why does the customer need this? (List the business requirements here)

      Currently, users need cluster-admin privileges to deploy a HostedCluster with a HostedControlPlane, which presents security and operational risks. Partners who operate within OpenShift environments may need to deploy these resources without requiring excessive privileges that go beyond the intended scope of their responsibilities. This feature is necessary to reduce security risks, enhance operational efficiency, and ensure role-based access control (RBAC) principles are followed.

      4. List any affected packages or components.

      MCE/Hypershift

              racedoro@redhat.com Ramon Acedo
              kwondrat@redhat.com Kevin Wondratsch
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                None
                None