Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Separate Role / ClusterRole and Rolebinding / ClusterRolebinding #2686

Open
dal13002 opened this issue Dec 13, 2024 · 0 comments
Open

Separate Role / ClusterRole and Rolebinding / ClusterRolebinding #2686

dal13002 opened this issue Dec 13, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@dal13002
Copy link

dal13002 commented Dec 13, 2024

Is your feature request related to a problem? Please describe the impact that the lack of the feature requested is creating.

The goal is to have better user experience for non-admin users. If users only have access to specific namespaces, they should still be able to see role / rolebindings within their namespace using headlamp.

Describe the solution you'd like

As of today, headlamp has a single tab on the UI for:

  • "Roles", which shows both clusterroles and roles
  • "RoleBindings", which shows both rolebindings and clusterrolebindings

For admins this is fine but ideally roles tab should be split into "Roles" and "ClusterRoles" tabs, and Rolebindings should be split into "RoleBinding" and "ClusterRoleBinding" tabs. This is because roles and rolebindings are namespaced, meaning I should be allowed to filter / scope these to just my namespace (similar to how pods, deployments, jobs, etc.. work- we can select a namespace from the UI). But clusterroles and clusterrolebindings are not namespaced meaning only admins can access them.

What users will benefit from this feature?

In-cluster users

Are you able to implement this feature?

No

Additional context

N/A

@dal13002 dal13002 added the enhancement New feature or request label Dec 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant