Ohoy! I want to grant a user read-only access to ...
# neuvector-security
s
Ohoy! I want to grant a user read-only access to NeuVector via Rancher. I've followed the guide for Rancher RBAC (https://open-docs.neuvector.com/integration/rancher_sso_rbac/) but my unprivileged test user cannot see the NeuVector link in the Rancher dashboard. 🤔 Do you know if something more is needed to grant access to NeuVector via Rancher?
h
do you have to use Rancher RBAC? if this user does not have anything else to do in Rancher then why not setup authentication in Neuvector ?
s
Yes, I have enabled that according to the README for the Helm chart.
Sorry, I misread. New response in a minute
Yeah, I do all my user management via Rancher so I would rather avoid having to create a whole new user management solution and, especially, expose that to the Internet.
h
oh okay - got it..
s
Seems like NeuVector's docs are incorrect. They say to grant access to API group
<http://permission.neuvector.com|permission.neuvector.com>
but it's actually just
<http://neuvector.com|neuvector.com>
I think.
No, not quite. It's
<http://permission.neuvector.com|permission.neuvector.com>
for access inside of NeuVector, but it's also required to have
get
on
<http://nvsecurityrules.neuvector.com|nvsecurityrules.neuvector.com>
in the
cattle-neuvector-system
namespace for Rancher to display the dashboard item. 🤔