Create Role
A Role is a set of permissions that can be assigned to a user within a namespace for a cluster. A namespace divides a cluster between multiple users. Kubernetes APIs are categorized into API groups, based on the API objects that they relate to. The API groups for Kubernetes that are visible on the Platform9 Clarity UI consist of upstream Kubernetes APIs and Kubernetes APIs provided by Platform9.
While creating a Role, you can specify the operations that can be performed by the Role on one or more API objects in one or more API groups. You can create one or more Kubernetes Roles for a namespace through the Platform9 Clarity UI. You can also set permissions on operations related to one or more API groups, when you create a new role.
Follow the steps given below to create a Role, through the Platform9 Clarity UI.
- Navigate to Kubernetes>RBAC>Roles.
Click Add Role.
Enter the Name for the cluster.
Select the Cluster.
Select the namespace for which you want to create the Role.
Search or select an API group and select the operations to grant permissions on operations for the selected API group. Repeat selection of operations on as many other API groups as required. To grant permission of a specific verb to add to the resource, select the checkbox for the specific operation.
- When complete, click the Add Role button.
A Role is created and visible in the Platform9 management plane under the list of existing Roles. Once a Role is created, you can assign the Role to a user or group of Users by creating a RoleBinding.