GlobalRole
GlobalRole defines rules that can be applied to the local cluster and or every downstream cluster.
| Field / Type | Description |
|---|---|
apiVersion | APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources |
builtin | Builtin specifies that this GlobalRole was created by Rancher if true. Immutable. |
description | Description holds text that describes the resource. |
displayName | DisplayName is the human-readable name displayed in the UI for this resource. |
InheritedClusterRoles are the names of RoleTemplates whose permissions are granted by this GlobalRole in every cluster besides the local cluster. To grant permissions in the local cluster, use the Rules field. | |
InheritedFleetWorkspacePermissions are the permissions granted by this GlobalRole in every fleet workspace besides the local one. | |
InheritedNamespacedRules are the rules that are active in each namespace of every cluster besides the local cluster. If the namespace does not exist in a downstream cluster, the rules will not be applied. * has no special meaning in the keys - these keys are read as raw strings and must exactly match with one existing namespace. | |
kind | Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds |
metadata | No description provided. |
NamespacedRules are the rules that are active in each namespace of this GlobalRole. These are applied to the local cluster only. * has no special meaning in the keys - these keys are read as raw strings and must exactly match with one existing namespace. | |
newUserDefault | NewUserDefault specifies that all new users created should be bound to this GlobalRole if true. |
Rules holds a list of PolicyRules that are applied to the local cluster only. | |
Status is the most recently observed status of the GlobalRole. |