Files
cloudpods/scripts/rbac/sysadmin.yaml

6 lines
109 B
YAML

# rbac for sysadmin
condition: tenant=="system" && roles.contains("admin")
is_admin: true
policy:
*: allow