adjust the authorization rules for workspace roles (#6329)

Signed-off-by: hongming <coder.scala@gmail.com>
This commit is contained in:
hongming
2025-01-06 15:34:24 +08:00
committed by GitHub
parent a84a6892e4
commit 452d09775a
2 changed files with 11 additions and 12 deletions

View File

@@ -1103,6 +1103,8 @@ metadata:
iam.kubesphere.io/category: workspace-access-control
iam.kubesphere.io/scope: "workspace"
iam.kubesphere.io/aggregate-to-viewer: ""
iam.kubesphere.io/aggregate-to-self-provisioner: ""
iam.kubesphere.io/aggregate-to-regular: ""
kubesphere.io/managed: 'true'
name: workspace-view-members
spec:
@@ -1168,6 +1170,8 @@ metadata:
iam.kubesphere.io/category: workspace-access-control
iam.kubesphere.io/scope: "workspace"
iam.kubesphere.io/aggregate-to-viewer: ""
iam.kubesphere.io/aggregate-to-regular: ""
iam.kubesphere.io/aggregate-to-self-provisioner: ""
kubesphere.io/managed: 'true'
name: workspace-view-roles
spec:
@@ -1846,6 +1850,7 @@ metadata:
iam.kubesphere.io/category: workspace-app
iam.kubesphere.io/scope: workspace
kubesphere.io/managed: "true"
iam.kubesphere.io/aggregate-to-self-provisioner: ""
iam.kubesphere.io/aggregate-to-viewer: ""
iam.kubesphere.io/aggregate-to-regular: ""
name: workspace-view-app-repos
@@ -1877,7 +1882,6 @@ metadata:
iam.kubesphere.io/category: workspace-app
iam.kubesphere.io/scope: workspace
kubesphere.io/managed: "true"
iam.kubesphere.io/aggregate-to-self-provisioner: ""
iam.kubesphere.io/aggregate-to-admin: ""
name: workspace-manage-app-repos
spec:
@@ -2002,7 +2006,6 @@ metadata:
iam.kubesphere.io/category: workspace-app
iam.kubesphere.io/scope: workspace
kubesphere.io/managed: "true"
iam.kubesphere.io/aggregate-to-self-provisioner: ""
iam.kubesphere.io/aggregate-to-admin: ""
name: workspace-manage-app-templates
spec: