This message was deleted.
# generala
adamant-kite-43734
10/05/2023, 8:35 AMThis message was deleted.
f
faint-policeman-5206
10/05/2023, 8:47 AMMultiple Rancher instances is the one option...
e
eager-byte-23295
10/05/2023, 9:05 AMEven so, when we add a new cluster we need to specify permissions for it
f
faint-policeman-5206
10/05/2023, 9:09 AMYou can give global (instance-wide) permissions...
m
many-nail-29864
10/05/2023, 10:37 AMOr add them by code, same as adding cluster
e
eager-byte-23295
10/05/2023, 12:14 PMWe add them already via Terraform
But the permissions is currently a static list of
user group (we have SSO with Azure) to roles on each cluster
If we could say for example that all the users in group
developersqam
many-nail-29864
10/05/2023, 12:17 PMIf you created the cluster from a variable in terraform you maybe could have some kind of metadata there
e
eager-byte-23295
10/05/2023, 12:42 PMThe thing is that the clusters are created in a totally separate TF plan than where I'm defining the permissions
m
many-nail-29864
10/05/2023, 12:43 PMCould you it by some naming standard and figure it out that way?
many-nail-29864
10/05/2023, 1:06 PMWhen I do terraform stuff I usually use terragrunt to describe the different environments, then it's easy to add that kind of metadata
5 Views