public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-29 14:38:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update restricted-admin permissions for Rancher v2.5.6

Browse Source
This commit is contained in:
Catherine Luse
2021-02-18 15:50:34 -07:00
parent 5766a86987
commit d05764867f
1 changed files with 17 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.5/en/admin-settings/rbac/global-permissions/_index.md
+17
View File
@@ -43,6 +43,20 @@ CATTLE_RESTRICTED_DEFAULT_ADMIN=true
``` ```
### List of `restricted-admin` Permissions ### List of `restricted-admin` Permissions
The permissions for the `restricted-admin` role differ based on the Rancher version.
{{% tabs %}}
{{% tab "v2.5.6" %}}
The `restricted-admin` permissions are as follows:
- Has full admin access to all downstream clusters managed by Rancher.
- Can add other users and assign them to clusters outside of the local cluster.
- Can create other restricted admins.
{{% /tab %}}
{{% tab "v2.5.0-v2.5.5" %}}
The `restricted-admin` permissions are as follows: The `restricted-admin` permissions are as follows:
- Has full admin access to all downstream clusters managed by Rancher. - Has full admin access to all downstream clusters managed by Rancher.
@@ -51,6 +65,9 @@ The `restricted-admin` permissions are as follows:
- Can create other restricted admins. - Can create other restricted admins.
- Cannot grant any permissions in the local cluster they don't currently have. (This is how Kubernetes normally operates) - Cannot grant any permissions in the local cluster they don't currently have. (This is how Kubernetes normally operates)
{{% /tab %}}
{{% /tabs %}}
### Upgrading from Rancher with a Hidden Local Cluster ### Upgrading from Rancher with a Hidden Local Cluster
Prior to Rancher v2.5, it was possible to run the Rancher server using this flag to hide the local cluster: Prior to Rancher v2.5, it was possible to run the Rancher server using this flag to hide the local cluster: