1
0
mirror of https://github.com/lensapp/lens.git synced 2025-05-20 05:10:56 +00:00
This commit is contained in:
Just1689 2020-08-05 10:23:59 +02:00
parent b9b2d38349
commit 87037d8354

View File

@ -1,6 +1,6 @@
# Read All ClusterRole # Read All ClusterRole
The read all cluster role found in cluster-role.yaml can be bound to service accounts used with Lens. Service Accounts with this cluster role will be able to see cluster metrics and pod metrics but will not be able to see secrets and service accounts. The cluster role does not allow for modifying K8s resources (update, create or delete). It also explicitly lists Kubernetes' little-known sub-resources (which is why the base `view` cluster role cannot see metrics). The read all cluster role found in cluster-role.yaml can be bound to service accounts used with Lens. Service Accounts with this cluster role will be able to see cluster metrics and pod metrics but will not be able to see secrets and service accounts. The cluster role does not allow for modifying K8s resources (update, create or delete). It also explicitly lists Kubernetes' little-known sub-resources (which is why service accounts bound to the base `view` cluster role cannot see metrics in Lens).
This is ideal for giving particular users access to the a read only user to use in Lens or for dashboards left up in the office. This is ideal for giving particular users access to a read only user to use in Lens or for dashboards left up in the office.