# Permission Manager | A Project That Brings Sanity To Kubernetes RBAC And Users Management, Web UI FTW

**URL:** <https://onehack.st/t/permission-manager-a-project-that-brings-sanity-to-kubernetes-rbac-and-users-management-web-ui-ftw/97719>\
**Category:** Tools & Scripts\
**Tags:** tools\
**Created:** [July 25, 2020, 5:26pm UTC](https://onehack.st/t/permission-manager-a-project-that-brings-sanity-to-kubernetes-rbac-and-users-management-web-ui-ftw/97719 "2020-07-25T17:26:02Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlueHacker](https://onehack.st/user_avatar/onehack.st/bluehacker/32/174721_2.png) [@BlueHacker](https://onehack.st/u/BlueHacker)\
**Post date:** [July 25, 2020, 5:26pm UTC](https://onehack.st/t/permission-manager-a-project-that-brings-sanity-to-kubernetes-rbac-and-users-management-web-ui-ftw/97719/1 "2020-07-25T17:26:02Z")

</div>

# Permission manager

[![flow](https://github.com/sighupio/permission-manager/raw/master/docs/assets/flow.gif)](https://github.com/sighupio/permission-manager/blob/master/docs/assets/flow.gif)

Welcome to the Permission Manager! 🎉 🎉

Permission Manager is an application developed by [SIGHUP](https://sighup.io/) that enables a super-easy and user-friendly **RBAC management for Kubernetes**. If you are looking for a simple and intuitive way of managing your users within a Kubernetes cluster, this is the right place.

With Permission Manager, you can create users, assign namespaces/permissions, and distribute Kubeconfig YAML files via a nice&easy web UI.

## Screenshots

_First Page_

[![First Page](https://github.com/sighupio/permission-manager/raw/master/docs/assets/first-page.png)](https://github.com/sighupio/permission-manager/blob/master/docs/assets/first-page.png)

_Creating a user_

[![Creating a user](https://github.com/sighupio/permission-manager/raw/master/docs/assets/create-user.png)](https://github.com/sighupio/permission-manager/blob/master/docs/assets/create-user.png)

_Creating a user - Summary_

[![Create user Sumary](https://github.com/sighupio/permission-manager/raw/master/docs/assets/create-user-summary.png)](https://github.com/sighupio/permission-manager/blob/master/docs/assets/create-user-summary.png)

- User’s Kubeconfig\*

[![User's Kubeconfig](https://github.com/sighupio/permission-manager/raw/master/docs/assets/users-kubeconfig.png)](https://github.com/sighupio/permission-manager/blob/master/docs/assets/users-kubeconfig.png)

## Installation

To deploy and run the Permission Manager on your cluster, follow the [installation guide](https://github.com/sighupio/permission-manager/blob/master/docs/installation.md)

## Development Setup

We love contributions from the community ❤.  
Learn [how-to-contribute](https://github.com/sighupio/permission-manager/blob/master/docs/how-to-contribute.md)

## FAQ

### How it works

The application allows us to define and select permission standard templates (those defining who can do what, within a namespace or globally) and associate them with all the users you might want to create.

The template system is an abstraction over Cluster-Roles, RoleBinding, and ClusterRolesBindigs.

Do we plan to use CRDs and custom labels? Sure, it’s in the product roadmap.

### What is a template

A template is a ClusterRole with a prefix

`template-namespaced-resources___`

for example `template-namespaced-resources___developer`

#### Why a template is not a CRD

When we started the development of this project, a template was one-to-one to a `clusterrole` , the usage of a CRD looked overkill. This will obviously change in future to avoid polluting `clusterroles` and will allow us to have a more precise encapsulation of what is owned by the permission manager.

### How to add a new template

Create a clusterrole starting with `template-namespaced-resources___` and apply it.

#### Default templates

`developer` and `operation` default templates can be created by applying the manifest located at _k8s/k8s-seeds/seed.yml_

kubectl apply -f k8s/k8s-seeds

### What is a user

A user is a custom resource of kind `permissionmanagerusers.permissionmanager.user`

## Commercial & Enterprise Support

Are you using Permission Manager in your clusters and looking for commercial support? Let us know and [get in touch](mailto:sales@sighup.io)

## GitHub:

[https://github.com/sighupio/permission-manager](https://github.com/sighupio/permission-manager)