This message was deleted.
# general
a
This message was deleted.
h
I have not upgraded to 2.8 yet... Is there still an option to assign
cluster owner
privileges ? This is done per cluster (atleast in 2.7.x) (in Cluster Membership tab).
👍 1
I have not used restricted-admin because that allowed access to Auth Providers (which I didn't want to have) But cluster owner (per cluster basis) still allowed users to full control downstream cluster
s
Yes, but I believe cluster owner must be added manually for each cluster. I'd prefer to have all admins automatically have the right privileges, so I don't have to wonder if I added them or not.
Ah, but that has changed in the v2.8.1 release! I read it before, but now I get it!
Global Role configuration is now more flexible. Additional fields are being added to the Global Role CRD, starting with the inheritedClusterRoles field, which allows users to give permissions for all downstream clusters with a single GlobalRole and GlobalRoleBinding. This lets you easily define and apply roles tailored to specific use cases, creating a level of flexibility not present in built-in global roles, such as Restricted Admin.
How neat.
h
thanks for sharing that