{{/* RBAC configuration sub page (/config/rbac): staged-changes banner with publish and discard, RBAC groups/roles/grants tables (staged view when a draft exists). Changes are staged and go live on publish, unlike the other config sections. HTMX partial: block rbac_content */}} {{ template "head" . }}
{{ template "drawer_toggle" }}
{{ block "rbac_content" . }}
{{ template "hamburger" }}
{{ template "page_title" "OpenRun Configuration" }}

RBAC

Role based access control - changes are staged and go live on publish

{{ template "page_progress" }} {{ if .Data.Error }} {{ template "error_alert" .Data.Error }} {{ else }} {{ template "flash_alerts" .Data }} {{ $view := .Data.View }} {{ $viewLive := .Data.ViewLive }} {{ $canEdit := and (index .Data.Perms "config:update") (not $viewLive) }} {{ $editTitle := "requires config:update" }} {{ if $viewLive }} {{ $editTitle = "read-only live view - switch to the staged draft to edit" }} {{ end }} {{ if .Data.HasStaged }} {{ end }}

RBAC

{{ if .Data.Live.enabled }} enabled {{ else }} disabled {{ end }} {{ if .Data.HasStaged }} {{ if $viewLive }} live view {{ else }} pending {{ end }} {{ end }} role based access control for the management APIs {{ if $viewLive }} {{ if $view.enabled }}Enabled{{ else }}Disabled{{ end }} {{ else }} {{ end }}

Groups

{{ len $view.groups }} groups - user id lists, usable in grants {{ if not $viewLive }} + Add group {{ end }}
{{ if $view.groups }}
{{ range $view.groups }} {{ if not $viewLive }} {{ end }} {{ end }}
{{ .name }} {{ range .users }} {{ . }} {{ end }}
edit
{{ else }}

No groups defined

{{ end }}

Roles

{{ len $view.roles }} roles - permission sets; the built-in admin role always exists {{ if not $viewLive }} + Add role {{ end }}
{{ if $view.roles }}
{{ range $view.roles }} {{ if not $viewLive }} {{ end }} {{ end }}
{{ .name }} {{ range .permissions }} {{ . }} {{ end }}
edit
{{ else }}

No roles defined

{{ end }}

Grants

{{ len $view.grants }} grants - who gets which roles on which apps, services and bindings {{ if not $viewLive }} + Add grant {{ end }}
{{ if $view.grants }}
{{ if not $viewLive }} {{ end }} {{ range $view.grants }} {{ if not $viewLive }} {{ end }} {{ end }}
Description Users / groups Roles TargetsActions
{{ .description }} {{ range .users }} {{ . }} {{ end }} {{ range .roles }} {{ . }} {{ end }} {{ range .targets }} {{ . }} {{ end }}
edit
{{ else }}

No grants defined - with RBAC enabled, only admins can use the management APIs

{{ end }}
{{ end }} {{ end }}
{{ template "sidebar" . }}