Skip to content

Updating Rancher Rbac permissions#248

Open
kakabisht wants to merge 1 commit into
neuvector:mainfrom
kakabisht:update-rancher-rbac
Open

Updating Rancher Rbac permissions#248
kakabisht wants to merge 1 commit into
neuvector:mainfrom
kakabisht:update-rancher-rbac

Conversation

@kakabisht

Copy link
Copy Markdown
Contributor

Update https://open-docs.neuvector.com/integration/rancher_sso_rbac/ with Rancher project role configuration

@holyspectral holyspectral added the documentation Improvements or additions to documentation label Jul 2, 2026
@holyspectral

Copy link
Copy Markdown
Contributor

Closing and reopening to test project trigger.

@holyspectral holyspectral reopened this Jul 2, 2026
@williamlin-suse

Copy link
Copy Markdown

I wonder whether this PR is needed.
First, it's actually a bug that NV Rancher UI extension needs user to have RBAC on apiGroup neuvector.com
If not considering NV Rancher UI extension, NV UI thru Rancher SSO works well even the user is not assigned RBAC on apiGroup neuvector.com (i.e. RBAC on APIGroup "permission.neuvector.com" is enough)
NV UI thru Rancher SSO provides complete UI functionalities than NV Rancher UI extension.
For historic reasons, there are 3 apiGroups("permission.neuvector.com", "api.neuvector.com" & "read-only.neuvector.api.io") actually are for exactly the same SSO purpose.
However, currently it's APIGroup "permission.neuvector.com" integrated with Rancher UI -> Role configuration page.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants