mirror of
https://github.com/paralus/paralus.git
synced 2026-08-20 20:06:19 +00:00
Nirav ParikhandGitHub
dd563582d0
* adding permissions for cli.config.read and code fix for non admin users cli config download Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com> * includes changes for nix, go version 1.21 and addressed review comments Signed-off-by: nirparikh05 <nir.parikh05@gmail.com> * fixed lints Signed-off-by: nirparikh05 <nir.parikh05@gmail.com> --------- Signed-off-by: Nirav Parikh <nir.parikh05@gmail.com> Signed-off-by: nirparikh05 <nir.parikh05@gmail.com>
138 lines
3.8 KiB
JSON
138 lines
3.8 KiB
JSON
{
|
|
"SYSTEM": {
|
|
"SUPER_ADMIN": [
|
|
"ops_star.all"
|
|
]
|
|
},
|
|
"ORGANIZATION": {
|
|
"ADMIN": [
|
|
"user.read",
|
|
"user.write",
|
|
"group.read",
|
|
"group.write",
|
|
"console.all",
|
|
"partner.read",
|
|
"project.read",
|
|
"project.write",
|
|
"project.admin.write",
|
|
"role.read",
|
|
"role.write",
|
|
"rolepermission.read",
|
|
"oidc.read",
|
|
"oidc.write",
|
|
"ssouser.write",
|
|
"ssouser.read",
|
|
"project.auditLog.read",
|
|
"project.relayAudit.read",
|
|
"kubeconfig.read",
|
|
"kubeconfig.write",
|
|
"v2debug.read",
|
|
"kubectl.clustersettings.read",
|
|
"kubectl.clustersettings.write",
|
|
"kubectl.fullaccess",
|
|
"org.auditLog.read",
|
|
"org.relayAudit.read",
|
|
"organization.read",
|
|
"organization.write",
|
|
"cluster.read",
|
|
"cluster.write",
|
|
"hub.openapi.explorer.read",
|
|
"location.read",
|
|
"location.write"
|
|
],
|
|
"ADMIN_READ_ONLY": [
|
|
"user.read",
|
|
"group.read",
|
|
"console.all",
|
|
"partner.read",
|
|
"project.read",
|
|
"role.read",
|
|
"oidc.read",
|
|
"project.auditLog.read",
|
|
"project.relayAudit.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.clustersettings.read",
|
|
"kubectl.cluster.read",
|
|
"org.auditLog.read",
|
|
"org.relayAudit.read",
|
|
"organization.read",
|
|
"cluster.read",
|
|
"hub.openapi.explorer.read"
|
|
]
|
|
},
|
|
"PROJECT": {
|
|
"PROJECT_ADMIN": [
|
|
"console.all",
|
|
"partner.read",
|
|
"organization.read",
|
|
"project.admin.write",
|
|
"project.auditLog.read",
|
|
"project.relayAudit.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.fullaccess",
|
|
"cluster.read",
|
|
"cluster.write",
|
|
"hub.openapi.explorer.read",
|
|
"project.read",
|
|
"project.write",
|
|
"cli.config.read"
|
|
],
|
|
"PROJECT_READ_ONLY": [
|
|
"console.all",
|
|
"partner.read",
|
|
"organization.read",
|
|
"project.read",
|
|
"project.auditLog.read",
|
|
"project.relayAudit.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.cluster.read",
|
|
"cluster.read",
|
|
"hub.openapi.explorer.read",
|
|
"cli.config.read"
|
|
],
|
|
"CLUSTER_ADMIN": [
|
|
"console.all",
|
|
"partner.read",
|
|
"organization.read",
|
|
"project.read",
|
|
"project.auditLog.read",
|
|
"project.relayAudit.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.clustersettings.read",
|
|
"kubectl.clustersettings.write",
|
|
"kubectl.cluster.read",
|
|
"cluster.read",
|
|
"kubectl.fullaccess",
|
|
"cli.config.read"
|
|
]
|
|
},
|
|
"NAMESPACE": {
|
|
"NAMESPACE_ADMIN": [
|
|
"console.all",
|
|
"partner.read",
|
|
"organization.read",
|
|
"project.read",
|
|
"cluster.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.namespace.read",
|
|
"kubectl.namespace.write",
|
|
"cli.config.read"
|
|
],
|
|
"NAMESPACE_READ_ONLY": [
|
|
"partner.read",
|
|
"organization.read",
|
|
"project.read",
|
|
"cluster.read",
|
|
"kubeconfig.read",
|
|
"v2debug.read",
|
|
"kubectl.namespace.read",
|
|
"cli.config.read"
|
|
]
|
|
}
|
|
}
|