Long time no see! I hope you’re all doing great. We’re currently managing Rancher in production with over 50 downstream clusters (yes, you read that right—50+!). As you can imagine, adding and removing clusters is a regular part of our routine, but it does come with its challenges. One of the hurdles we’re facing is setting up sustainable read-only access across all these dynamic clusters. Unfortunately, there’s no default read-only role available, and we’d love to find an easier way to grant this access without turning into cluster management wizards overnight! If you have any clever hacks, handy scripts, or best practices up your sleeves, we’d greatly appreciate your insights. We’re looking for a solution that can help us keep things smooth and efficient. Thanks so much for your help! Looking forward to hearing your ideas.