feat: add internal cluster admin endpoints

2026-06-11 09:35:25 +02:00
parent 376f6249b2
commit fd9a99a6d8
15 changed files with 561 additions and 7 deletions
@@ -3,10 +3,11 @@ package rbac
 type Role string

 const (
-	RoleOwner  Role = "owner"
-	RoleAdmin  Role = "admin"
-	RoleMember Role = "member"
-	RoleViewer Role = "viewer"
+	RoleOwner    Role = "owner"
+	RoleAdmin    Role = "admin"
+	RoleMember   Role = "member"
+	RoleViewer   Role = "viewer"
+	RoleOperator Role = "operator"
 )

 type Action string
@@ -72,6 +73,9 @@ var permissions = map[Role]map[Action]bool{
 		ActionProjectRead,
 		ActionSSHKeyRead,
 	),
+	RoleOperator: allow(
+		ActionClusterManage,
+	),
 }

 func allow(actions ...Action) map[Action]bool {