Fine-grained roles for hosted cluster resources

I propose that the hypershift operator comes with some pre-defined roles so that users can bind users, groups and service accounts to specific roles to achieve fine-grained RBAC to manage a fleet of hosted clusters.

For example, there should be 3 different roles that have difference access levels.

• view
• edit
• admin

There could be different personas with these roles like:

• hosted cluster viewer, editor, admin
• nodepool viewer, editor, admin
• etc

ACM is developing a unified way to manage remote cluster infrastructure resources such as OpenShift Virtualization VMs, hosted clusters, etc and having these pre-defined roles will help ACM and any individual that want to establish fine-grained RBAC for the users and admins in the organization.