(Default) Global Roles

[dbones]

extend to support Global and Cluster roles

need to be able to support a default value(s)

Normal Tenancy (there is no fire-fighter)

Global (this is a list, which becomes a number of individual bindings)

• UserBase
• Metrics
• Fleet (custom role) <- view

Cluster

• View Nodes (this is just a default value)

Platform Tenancy (normal)

Global

• UserBase
• Metrics
• Fleet (custom role) <- view
• View Users, groups and auth provider

Cluster

• view nodes, members, all projects

Zone Tenancy (FF)

ff can be rasied on a Tenancy or Zone

Global

• restricted Admin

Cluster

• Cluster owner

[dbones]

back gound info

Global

Cluster

make this as a custom role.

[dbones]

[dbones]

---

results

Added role (display is missing)

groups are correctly checked :)

reset the user

removing sammi

removed from team

removed from org

ok - sammi has no access

new user - role assignment

Default access

cannot see any clusters or projects

provided team access

limited to what the team is allowed access too

[dbones]

[dbones]

DEV

Saber

more developer access to the teams

Prod

Aqua (UK) - note that galaxy has access to this one

limited access for all teams

Yoko (Japan)

local

[dbones]

cannot import a cluster