Merge pull request #2719 from wansir/rolebase

initial role differentiation of DevOps project and namespace
This commit is contained in:
KubeSphere CI Bot
2020-08-01 09:51:52 +08:00
committed by GitHub
3 changed files with 15 additions and 7 deletions

View File

@@ -60,6 +60,7 @@ const (
ClusterRoleAnnotation = "iam.kubesphere.io/clusterrole"
RoleAnnotation = "iam.kubesphere.io/role"
RoleTemplateLabel = "iam.kubesphere.io/role-template"
ScopeLabelFormat = "scope.kubesphere.io/%s"
UserReferenceLabel = "iam.kubesphere.io/user-ref"
IdentifyProviderLabel = "iam.kubesphere.io/identify-provider"
PasswordEncryptedAnnotation = "iam.kubesphere.io/password-encrypted"
@@ -68,6 +69,7 @@ const (
ScopeWorkspace = "workspace"
ScopeCluster = "cluster"
ScopeNamespace = "namespace"
ScopeDevOps = "devops"
PlatformAdmin = "platform-admin"
NamespaceAdmin = "admin"
WorkspaceAdminFormat = "%s-admin"