Installer should create default cluster roles - Githubissues

docker / compose-on-kubernetes

Deploy applications described in Compose onto Kubernetes clusters

Apache License 2.0

1.42k stars 159 forks source link

Installer should create default cluster roles #29

Closed simonferquel closed 5 years ago

simonferquel commented 5 years ago

Kubernetes has a feature called aggregated cluster roles (see https://kubernetes.io/docs/reference/access-authn-authz/rbac/#aggregated-clusterroles). The idea is that these roles are an union of all roles matching their label selector. Kubernetes comes with 3 such built-in clusterroles (view, edit, admin). So...

As a Kubernetes administrator

I want users with global view, edit, or admin roles
to be able to view/edit/admin stacks
without additional role bindings

Acceptance criteria:

[ ] Compose on Kubernetes installer creates compose-stack-view, compose-stack-edit, compose-stack-admin Cluster Roles
[ ] Those roles have the correct labels so that they match the builtin view, edit, admin aggregated cluster roles selectors