From 66adb074d5b24ff9bcf65c529aa009c70725f4c7 Mon Sep 17 00:00:00 2001 From: Silvio Moioli Date: Fri, 22 Sep 2023 12:24:17 +0200 Subject: [PATCH] tips-for-scaling-rancher: add suggestions to minimize RoleBindings Signed-off-by: Silvio Moioli --- .../best-practices/rancher-server/tips-for-scaling-rancher.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/reference-guides/best-practices/rancher-server/tips-for-scaling-rancher.md b/docs/reference-guides/best-practices/rancher-server/tips-for-scaling-rancher.md index 44da173550a..662ba4c7dcc 100644 --- a/docs/reference-guides/best-practices/rancher-server/tips-for-scaling-rancher.md +++ b/docs/reference-guides/best-practices/rancher-server/tips-for-scaling-rancher.md @@ -23,7 +23,9 @@ etcd eventually encounters limitations to the number of a single Kubernetes reso `RoleBindings` are created in the local cluster as a side effect of many operations. -Considerations when attempting reduce `RoleBindings` in the local cluster: +Considerations when attempting to reduce `RoleBindings` in the local cluster: +* Limit the use of the [Restricted Admin](../../../how-to-guides/new-user-guides/authentication-permissions-and-global-configuration/manage-role-based-access-control-rbac/global-permissions#restricted-admin) role, preferring others wherever applicable +* If [external authentication](../../../pages-for-subheaders/authentication-config) is configured, use groups to assign roles preferably * Only add users to clusters and projects when necessary * Remove clusters and projects when they are no longer needed * Only use custom roles if necessary