Raul Cabello Martin

I can reproduce this in CRTB too. CRTB and PRTB don't use kubernetes owner references, they use the label `authz.cluster.cattle.io/rtb-owner-updated` instead. From what I can see in the code, `--cascade=orphan`...

> Some overall comments: > > * I would recommend using the existing labels ([GR](https://github.com/rancher/rancher/blob/12a48d56eb2e577ac386134aca1c90aadacd5069/pkg/controllers/management/auth/globalroles/globalrole_handler.go#L39), [GRB](https://github.com/rancher/rancher/blob/12a48d56eb2e577ac386134aca1c90aadacd5069/pkg/controllers/management/auth/globalroles/globalrolebinding_handler.go#L45)) for GR/GRB ownership. > * Since labels have a limit on length ([source](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/#syntax-and-character-set)) you...

## Validation Template ## Root Cause If a `RoleTemplate` is created with an empty list in any `Rule`, then rancher creates a corresponding `ClusterRole` with a nil list. When Rancher...

@bigkevmcd your fix was merged upstream, this issue would be fix if we were using the latest version. We are using an old version of the hamilton library. I guess...

Please notice that the `fleet-default` namespace is now inside the `FleetWorkspaces`. That means it is no longer inside the `System` Project. I don't see a major issue with that, but...

We are currently designing a new approach that gives more flexibility and it doesn't involve creating a new Project for supporting Fleet RBAC. A new PR will be created once...

We are not directly using this dependency. It is used by some of our dependencies. For example go-client is using [chzyer/logex v1.10 ](https://github.com/kubernetes/client-go/blob/master/go.sum#L42), and it is not a direct dependency...

# Validation ## Root Cause We need to provide a way to allow users to deploy resources using fleet in downstream clusters. The only way of doing this at the...

# QA Template ## Solution Add webhook support for Azure Webhooks. It works the same way as existing webhooks for `GitHub`, `Gitlab` and `BitBucket` ## Testing - Verify webhook in...

You can use `resourceNames` to solve this problem. For example, just `workspaceA` and `workspaceB` would be displyaed with following `ClusterRole` : ``` apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: cr-fleet-list-workspaces rules:...