This message was deleted.
# fleeta
adamant-kite-43734
12/06/2023, 11:56 AMThis message was deleted.
e
eager-byte-23295
12/07/2023, 3:57 PMAnyone??
b
bitter-hair-80953
12/08/2023, 10:11 AMYou probably just want to give Owner permission to your users that need full permissions and member permission to users that need read only access: https://ranchermanager.docs.rancher.com/how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/cluster-and-project-roles#:~:text=Cluster%20roles%20are%20roles%20that,and%20all%20resources%20in%20it.
e
eager-byte-23295
12/10/2023, 7:38 AM@bitter-hair-80953 That's right
But I don't want to do it on a per cluster basis.
I want to create a cluster group, and the users will have access to that group.
That way, for example, developers will have Cluster Owner permissions to all the clusters in dev, but Member in prod.
b
brave-afternoon-4801
12/10/2023, 1:22 PMSmart idea. Wish I knew how to help. I've found this fleet product to be woefully managed. It's crazy, because it's so central to everything once your clusters have been deployed.
e
eager-byte-23295
12/13/2023, 9:35 AMAnyone else knows how to achieve that?
b
bland-article-62755
12/13/2023, 7:37 PMA cluster group is essentially a named selectorSeems like there's no way to bind roles like this.
bland-article-62755
12/13/2023, 7:38 PMWhat I would likely do is use it to grok the cluster and have a script/cron-job do the bindings for you on each cluster object.