[RFE] Specify cluster scoped permissions for a project role template
https://jira.suse.com/browse/SURE-11886
Is your feature request related to a problem? Please describe. When I give permissions to a user, I often need to create a cluster role template to provide cluster scoped permissions, and project role templates to provide project scoped permissions. However, there are a handful of "promoted rules" that give a project role template cluster scoped permissions. This makes it easier to manage since I don't have to create 2 different role templates + a CRTB and a PRTB.
Describe the solution you'd like I'd like to specify my own "promoted rules" that give a project role template cluster scoped permissions. That way I can create project roles for my users and give them some form of access to cluster scoped resources that they may need.
Describe alternatives you've considered It's currently possible by assigning a cluster role and a project role to a user. This just provides a simplified method.
Additional context It also will help avoid confusion about "promoted rules" in the first place since users might not intend to give cluster wide access to the handful of hard coded resources we provide. There's no documentation about such a feature.
Source: rancher/rancher