1
0
mirror of https://github.com/lensapp/lens.git synced 2025-05-20 05:10:56 +00:00
This commit is contained in:
Just1689 2020-08-05 10:23:08 +02:00
parent f0771620dc
commit b9b2d38349

View File

@ -1,6 +1,6 @@
# Read All ClusterRole
The read all cluster role found in cluster-role.yaml can be bound to service accounts used with Lens. Service Accounts with this cluster role will be able to see cluster metrics and pod metrics but will not be able to see secrets and service accounts. The cluster role does not allow for modifying K8s resources. It also explicitly lists Kubernetes' little-known sub-resources (which is why the base `view` user cannot see metrics).
The read all cluster role found in cluster-role.yaml can be bound to service accounts used with Lens. Service Accounts with this cluster role will be able to see cluster metrics and pod metrics but will not be able to see secrets and service accounts. The cluster role does not allow for modifying K8s resources (update, create or delete). It also explicitly lists Kubernetes' little-known sub-resources (which is why the base `view` cluster role cannot see metrics).
This is ideal for giving particular users access to the a read only user to use in Lens or for dashboards left up in the office.