Hi 👋, I’m currently trying to make sense about fleet and how to implement some multi-tenancy via the the workspace isolation:
https://fleet.rancher.io/multi-user
I got it working after setting is all up manually - great, kinda
but I’m having some trouble:
1. how are the teams supposed to manage their secrets on the local cluster to access their private gitrepos if they have no RBAC on the local cluster where the fleet workspace/namespace live?
2. is there any intention on making it possible to create the fleet workspaces inside rancher projects so we can create RBACs on those projects for things like secrets management for the teams and their private gitrepo? even something like allowing to set the annotation and it gets propagated would be an awesome improvement!
3. I wanted to implement all of this via terraform and was a bit shocked there is no provider or even resource for fleet and managing it via terraform. 😕 Will we see any improvement on this in the future?
a. I got a janky solution via the kubernetes provider and creating the workspace as a manifest and creating the RBAC on the namespace and not a project but I’m not happy with the outcome as it means going against the whole ‘project’ idea of Rancher
I hope someone can enlighten me 🙂