Overview
This is a menu where the Project Administrator can manage the roles of the entire selected Project. There are Built-in Roles created when creating a Project and Custom Role types created by users, and you can manage the permissions for Tools, Kubernetes, and Menus of the corresponding role.
Project Built-in Role
Permissions for Tool, Kubernetes, and Menu of Project Built-in Role.
* 표시는 모든 항목을 나타냅니다.
Role Name | Type | Tool | Kubernetes | Menu |
Project Administrator | built-in | All Admin | * | * (Admin) |
Project Observer | built-in | All View | * (Get, List, Watch) | * (View) |
Cluster Administrator | built-in | N/A | * | Clusters,Workloads,Storages,Networking (Admin) |
Cluster Editor | built-in | N/A | apps(*) | Clusters,Workloads,Storages,Networking (Admin) |
Cluster Viewer | built-in | N/A | apps(Get, List, Watch) | Clusters,Workloads,Storages,Networking (View) |
Application Administrator | built-in | Gitea - Writer Grafana, Kibana - Viewer Habor - Admin | N/A | Applications (Admin) |
Deployment Group Administrator | built-in | N/A | N/A | Deploys (Admin) |
User Administrator | built-in | N/A | N/A | Members (Admin) |
Group Administrator | built-in | N/A | N/A | Groups (Admin) |
Role Administrator | built-in | N/A | N/A | Roles (Admin) |
Dashboard Reader | built-in | N/A | N/A | Dashboard (View) |
Nexus Administrator | built-in | Nexus - Admin | N/A | Nexus (View) |
Harbor Administrator | built-in | Harbor - Admin | N/A | Images (View) |
Harbor Developer | built-in | Harbor - Developer | N/A | Images (View) |
Git Administrator | built-in | Gitea - Admin | N/A | Source (View) |
Git Writer | built-in | Gitea - Write | N/A | Source (View) |
Git Reader | built-in | Gitea - Read | N/A | Source (View) |
Monitoring Administrator | built-in | Grafana - Admin | N/A | Monitoring (View) |
Monitoring Viewer | built-in | Grafana - Viewer | N/A | Monitoring (View) |
Logging Administrator | built-in | Kibana - Admin | N/A | Logging (View) |
Logging Viewer | built-in | Kibana - Viewer | N/A | Logging (View) |
The Project Roles menu is located under Administrator in the side menu.
Role List
This is the Project roles list screen.
New Role
Click the New Role button to create a Custom Role required for your project.
Enter the Role Name and Description and click the Create button.
After submitting a creation request, you can check the role you just created in the table in the list screen.
Role Type is created as a Custom Type.
Role Edit
The role editing screen consists of the Overview, Tools Permissions, Kubernetes Permissions, and Menus Permissions tabs.
Overview
You can view information about previously created Roles and edit the Description item.
Tool Permission
This page allows you to set permissions for tools used in conjunction with the console.
This is a role that can be set for each tool.
* * Please check Harbor Permissions by Role for Harbor's role-specific permissions for Harbor's role-specific permissions
Tool | 권한 | 내용 |
|---|---|---|
Gitea | Read | Read, View permissionRead, View permission |
Write | Edit, write permission | |
Admin | All rights reserved | |
Grafana, Kibana | Viewer | Read, View permission |
Editor | Edit, write permission | |
Admin | All rights reserved | |
Harbor | ProjectAdmin | All rights reserved |
Maintainer | Modify and delete repositories, scan and delete images | |
Developer | Modify and delete repositories, scan and delete images | |
Guest | Retag images, project members & log views | |
LimitedGuest | Repository lookup, image pull, Helm chart list lookup and download |
Kubernetes Permission
This is the page where you can set Kubernetes permissions.
You can set detailed permissions for Kubernetes resources, such as creation, query, and deletion.
Verb | 내용 |
|---|---|
Create | Create a new resource |
Get | Lookup individual resources |
List | Multiple resource lookups |
Watch | View individual resources or collections of resources |
Update | Change the entire contents of an existing resource |
Patch | Change the entire contents of an existing resource |
Delete | Delete individual resources |
Deletecollection | Delete multiple resources |
Menu Permission
This page allows you to set permissions for the console menu.
Role Delete
You can delete a Custom type Role by clicking the Delete Role Table button.
