Allow project members to show cluster details

sapcc · Jun 9, 2022 · 9495540 · 9495540
1 parent 217cb21
commit 9495540
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/etc/policy-ccadmin.json b/etc/policy-ccadmin.json
@@ -6,7 +6,7 @@
   "GetOpenstackMetadata": "rule:kubernetes_admin",
   "ListClusters": "rule:kubernetes_user",
   "CreateCluster": "rule:kubernetes_admin",
-  "ShowCluster": "rule:kubernetes_user",
+  "ShowCluster": "rule:kubernetes_user or role:member",
   "TerminateCluster": "rule:kubernetes_admin",
   "UpdateCluster": "rule:kubernetes_admin",
   "GetClusterCredentials": "rule:kubernetes_user",

diff --git a/etc/policy.json b/etc/policy.json
@@ -6,7 +6,7 @@
   "GetOpenstackMetadata": "rule:kubernetes_admin",
   "ListClusters": "rule:kubernetes_user",
   "CreateCluster": "rule:kubernetes_admin",
-  "ShowCluster": "rule:kubernetes_user",
+  "ShowCluster": "rule:kubernetes_user or role:member",
   "TerminateCluster": "rule:kubernetes_admin",
   "UpdateCluster": "rule:kubernetes_admin",
   "GetClusterCredentials": "rule:kubernetes_user",