< img height="1" width="1" style="display:none;" alt="" src="https://px.ads.linkedin.com/collect/?pid=3131724&fmt=gif" />

Role and Member Management

This document demonstrates how to manage roles and members in a DevOps project.

Within the scope of a DevOps project, you can grant permissions for the following resources to roles:

  • DevOps project settings

  • Pipelines

  • Credentials

  • Continuous deployments

  • Code repositories

  • Access control

Prerequisites

  • A DevOps project has been created, for example, demo-devops.

  • A user (e.g. devops-admin) with the admin role in the DevOps project.

Preset Roles

In DevOps Project Roles, there are three preset roles as follows. Preset roles are automatically created when a DevOps project is created and cannot be edited or deleted.

Preset RoleDescription

viewer

DevOps project viewer, view all resources in the DevOps project.

operator

DevOps project regular member, manage DevOps credentials and pipelines, and view members and roles in the DevOps project.

admin

DevOps project administrator, manage all resources in the DevOps project.

Create a DevOps Project Role

  1. Log in to the KubeSphere web console as the devops-admin user.

  2. Go to the DevOps Projects page and click a DevOps project (e.g. demo-devops).

    Note

    This document uses the devops-admin account as an example. As long as the role granted to the account includes the Role Management permission in the DevOps project, this account can create DevOps project roles.

  3. Select DevOps Project Settings > DevOps Project Roles and click Create.

  4. Set the Name. In this example, a role named pipeline-creator will be created. Click Edit Permissions to continue.

  5. On the Pipeline tab, select the permissions you want to grant to this role. For example, select Pipeline Management and Pipeline Viewing for this role. Click OK to complete the operation.

    Note

    Depends on means the current authorization item depends on the listed authorization items. After checking the permission, the system will automatically select all dependent permissions.

  6. The newly created role will be displayed in the DevOps Project Roles list. Click more on the right side to edit it.

    Note

    The pipeline-creator role is only granted Pipeline Management and Pipeline Viewing permissions, which may not meet your actual needs. This example is for demonstration purposes only. Please create custom roles according to your actual needs.

Invite DevOps Project Members

  1. In DevOps Project Settings, select DevOps Project Members and then click Invite.

  2. Click add to invite an account to join this DevOps project and grant the pipeline-creator role to this account.

    Note

    You must first invite the user to join the workspace where the DevOps project is located.

  3. Click OK to add the user to this DevOps project. On the DevOps Project Members page, the newly invited member will be displayed.

  4. Click more on the right side of the project member to modify the role of the member or remove the user from the DevOps project.

Receive the latest news, articles and updates from KubeSphere


Thanks for the feedback. If you have a specific question about how to use KubeSphere, ask it on Slack. Open an issue in the GitHub repo if you want to report a problem or suggest an improvement.