mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
35 lines
1.7 KiB
Plaintext
35 lines
1.7 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * virt/about_virt/virt-security-policies.adoc
|
|
|
|
:_mod-docs-content-type: REFERENCE
|
|
[id="default-cluster-roles-for-virt_{context}"]
|
|
= Default cluster roles for {VirtProductName}
|
|
|
|
[role="_abstract"]
|
|
By using cluster role aggregation, {VirtProductName} extends the default {product-title} cluster roles to include permissions for accessing virtualization objects. Roles unique to {VirtProductName} are not aggregated with {product-title} roles.
|
|
|
|
.{VirtProductName} cluster roles
|
|
[cols="1,1,4",options="header"]
|
|
|===
|
|
|Default cluster role
|
|
|{VirtProductName} cluster role
|
|
|{VirtProductName} cluster role description
|
|
|
|
.^| `view`
|
|
.^|`kubevirt.io:view`
|
|
| A user that can view all {VirtProductName} resources in the cluster but cannot create, delete, modify, or access them. For example, the user can see that a virtual machine (VM) is running but cannot shut it down or gain access to its console.
|
|
|
|
.^| `edit`
|
|
.^|`kubevirt.io:edit`
|
|
| A user that can modify all {VirtProductName} resources in the cluster. For example, the user can create VMs, access VM consoles, and delete VMs.
|
|
|
|
.^| `admin`
|
|
.^|`kubevirt.io:admin`
|
|
| A user that has full permissions to all {VirtProductName} resources, including the ability to delete collections of resources. The user can also view and modify the {VirtProductName} runtime configuration, which is located in the `HyperConverged` custom resource in the `openshift-cnv` namespace.
|
|
|
|
.^| `N/A`
|
|
.^|`kubevirt.io:migrate`
|
|
| A user that can create, delete, and update VM live migration requests, which are represented by namespaced `VirtualMachineInstanceMigration` (VMIM) objects. This role is specific to {VirtProductName}.
|
|
|===
|