feat: Implement Kubernetes Native RBAC Aggregation for cloud-manager#1740
feat: Implement Kubernetes Native RBAC Aggregation for cloud-manager#1740stekik wants to merge 11 commits into
Conversation
Control PanelHi, I'm an AI-powered Review Bot that helps you with summarizing and reviewing pull requests.
💌 Have ideas or want to contribute? Create an issue and share your thoughts with us! Made with ❤️ by Hyperspace. |
dushanpantic
left a comment
There was a problem hiding this comment.
We have both resource groups (cloud-control, cloud-resources) in same manifest which is not a possible scenario.
|
Cloud manager aggregated roles should be installed to SKR when cloud-manager is enabled |
|
Need clarification on:
|
tmilos77
left a comment
There was a problem hiding this comment.
Do not change kustomization.yaml files
Create just one admin role for group cloud-resources.kyma-project.io and * resoucrea and verbs
Note that work doesn't end here, that also has to be added to the module manifest, check with @ijovovic and the release procecure
|
cloud-control.kyma-project.io resources should not be part of these roles |
for SapNfsVolume
54520b0 to
8653caf
Compare
Description
This PR adds three aggregated ClusterRoles that automatically extend the standard Kubernetes
view,edit, andadminroles with permissions for all cloud-manager CRDsChanges proposed in this pull request:
Related issue(s)