Viewers should be able to copy the `Target Cluster` command for a `Shoot`
petersutter opened this issue · comments
What would you like to be added:
gardenlogin v0.5 or higher supports the shoots/viewerkubeconfig subresource. As a result, users with the Project viewer role can now access the Shoot cluster with read-only permission.
In addition, the cluster CA can now be fetched via ConfigMap (gardener/gardener#9123). This allows the generation of the gardenlogin kubeconfig via gardenctl with only viewer permissions.
Therefore, it should be possible to copy the Target Cluster command for a Shoot cluster as Project viewer.
Why is this needed: