Skip to main content
Version: 2.3

Management Roles

Management roles are defining templates for ClusterRoles that are intended to grant permissions to Loft's Management API.

Configuration

Metadata

Display Name

JSONPath in ClusterRoleTemplate CRD:
 spec.displayName (type: string)

Kubernetes Name

JSONPath in ClusterRoleTemplate CRD:
 metadata.name (type: string)

Description

JSONPath in ClusterRoleTemplate CRD:
 spec.description (type: string)

Labels

JSONPath in ClusterRoleTemplate CRD:
 metadata.labels (type: map[string]string)

Annotations

JSONPath in ClusterRoleTemplate CRD:
 metadata.annotations (type: map[string]string)

ClusterRole Template

RBAC Rules

JSONPath in ClusterRoleTemplate CRD:
 spec.localClusterRoleTemplate.spec.clusterRoleTemplate.rules (type: RBACRule[])

Aggregation

JSONPath in ClusterRoleTemplate CRD:
 spec.localClusterRoleTemplate.spec.clusterRoleTemplate.aggregationRule (type: RBACAggregationRule{})

Labels

JSONPath in ClusterRoleTemplate CRD:
 spec.localClusterRoleTemplate.metadata.labels (type: string[])

Annotations

JSONPath in ClusterRoleTemplate CRD:
 spec.localClusterRoleTemplate.metadata.annotations (type: string[])

Access To Management Role

JSONPath in ClusterRoleTemplate CRD:
 spec.access (type: Access[])