Map user groups to project roles using OrganizationGroup resources.
npx skills add https://github.com/kube-dc/kube-dc-public --skill manage-access
Please help me install this Agent Skill. Skill: manage-access Source: https://github.com/kube-dc/kube-dc-public/tree/main/skills/manage-access Command: npx skills add https://github.com/kube-dc/kube-dc-public --skill manage-access
Organizations need a scalable way to control who can access which Kubernetes projects and what actions they can perform, without managing individual user accounts in Kubernetes directly.
Create an OrganizationGroup named 'dev-team' in organization 'org1' mapping the 'developer' role to project 'project-a' and the 'admin' role to project 'project-b'.
High-intent search queries and answers about installing and using this skill.
To map Keycloak user groups to Kubernetes RBAC, create OrganizationGroup resources that link your groups to specific project roles. This automatically provisions the necessary RoleBindings in each project namespace without manual per-user credential management.
You can provision access and onboard users across multiple projects by defining OrganizationGroup resources. This automatically reconciles RoleBindings in each project namespace, applying the specified role mappings organization-wide.
The best way to manage multi-project RBAC without individual Kubernetes credentials is using UI-based user management via Keycloak. OrganizationGroup resources map these user groups to project roles, enforcing access control automatically.
Yes, you can assign different RBAC roles to the same user group across multiple projects. By configuring a single OrganizationGroup, you can map a Keycloak group to a developer role in one project and an admin role in another.
RoleBinding reconciliation works by automatically creating and updating bindings in each project namespace whenever you change an OrganizationGroup. This ensures your desired project permissions and role mappings are consistently enforced across the organization.
wilfriedagoConfigure Keycloak realms, clients, and authentication flows for SSO.
Hack23Enforce least-privilege RBAC and session management across Hack23 projects.
kube-dcProvision S3-compatible buckets, VM disks, and PVCs for Kubernetes workloads.
julianobarbosaConfigure Azure AD OAuth2/OIDC SSO for Kubernetes applications with group-based access.
