- Remove spoofed rbac role template type
- Use spoof's base type's management global role and role template types
- Display these types as global, cluster and project tables in auth product
- As per conversation the newer steve api is not ready and only supports admins
- Calls for list and delete now use norman tokes and not steve management.cattle.io.token
- Supporting components have been updated to use the different model
- Also fixed a bug where tokens with +1 month expiry times would cause exceptions
- Add groups page with table to the auth product
- Allow user to assign roles to groups previously without roles or edit
groups with existing roles
Comments
- I haven't added any special ux for the case where there's no auth
provider and therefore no groups
- ./components/GlobalRoleBindings.vue will be updated when the same
component is used for assign global roles to a user principal
- ./components/GlobalRoleBindings.vue ln 139 Couldn't create a binding
without the generateName metadata property. Have given this a
`ui-` prefix. Is this correct?
- In order to determine which global roles are bound to each principal
(so we can filter by principals that have them).. we go out and fetch
ALL role bindings. Is this too costly?
- On the groups page the 'refresh' button is quite big, we should
consider reducing this
- Move the default backend tab to be after rule
- Validation of the "target service" should be a tool tip and color
- Putting a "/" de-focuses
- Combine the rule and certs into one table instead of multiple boxes, need a name
rancher/dashboard#1755
- Move, size, center default column
- Deemphasize unchecked value for Checked column formatter
- Removed 60% width on target, percentages are of the entire table
instead of being of the remaining space, so this ends up making other
columns not fit
I migrated the overview page logic into the models so
the logic could be used to generate the tables in
both the list views and the overview.
rancher/dashboard#1569