Merge pull request #3472 from jtravee/Manage_Node_Permissions

Manage node permissions for RKE/RKE2
This commit is contained in:
Billy Tat
2021-08-27 16:11:25 -07:00
committed by GitHub
@@ -39,13 +39,25 @@ The following table lists each built-in custom cluster role available and whethe
| Manage Cluster Backups             | ✓ | | | Manage Cluster Backups             | ✓ | |
| Manage Cluster Catalogs | ✓ | | | Manage Cluster Catalogs | ✓ | |
| Manage Cluster Members | ✓ | | | Manage Cluster Members | ✓ | |
| Manage Nodes | ✓ | | | Manage Nodes [(see table below)](#Manage-Nodes-Permissions)| ✓ | |
| Manage Storage | ✓ | | | Manage Storage | ✓ | |
| View All Projects | ✓ | | | View All Projects | ✓ | |
| View Cluster Catalogs | ✓ | ✓ | | View Cluster Catalogs | ✓ | ✓ |
| View Cluster Members | ✓ | ✓ | | View Cluster Members | ✓ | ✓ |
| View Nodes | ✓ | ✓ | | View Nodes | ✓ | ✓ |
#### Manage Nodes Permissions
The following table lists the permissions available for the `Manage Nodes` role in RKE and RKE2.
| Manage Nodes Permissions | RKE | RKE2 |
|-----------------------------|-------- |--------- |
| SSH Access | ✓ | ✓ |
| Delete Nodes | ✓ | ✓ |
| Scale Clusters Up and Down | ✓ | * |
***In RKE2, you must have permission to edit a cluster to be able to scale clusters up and down.**
<br />
For details on how each cluster role can access Kubernetes resources, you can go to the **Global** view in the Rancher UI. Then click **Security > Roles** and go to the **Clusters** tab. If you click an individual role, you can refer to the **Grant Resources** table to see all of the operations and resources that are permitted by the role. For details on how each cluster role can access Kubernetes resources, you can go to the **Global** view in the Rancher UI. Then click **Security > Roles** and go to the **Clusters** tab. If you click an individual role, you can refer to the **Grant Resources** table to see all of the operations and resources that are permitted by the role.
> **Note:** > **Note:**