AKE project manager

AKE manages one or more namespaces through projects, and can perform RBAC authorization on user requests to access clusters. The permissions a user has depend on the role assigned to that user in the project corresponding to the cluster. The AKE project manager synchronizes user permission information to AKE workload clusters. When a user accesses a cluster by using the user's own kubeconfig file, Kubernetes determines whether the user has permission to access corresponding resources in the cluster through RBAC authorization.

The AKE project manager includes Project Controller, ProjectRole Controller, and ProjectRoleBinding Controller, and defines Project CR, ProjectRole CR, and ProjectRoleBinding CR.

• Project CR is used to describe a project in a cluster. A project manages resources by namespace.
• ProjectRole CR is used to describe a project role. Different project roles have different permissions to access and operate resources in a project.
• ProjectRoleBinding CR is used to describe the binding relationship between a user and a project role. The user will have the permissions corresponding to the project role in the project.