Assigning Permissions to ServiceStage-Dependent Services

Assigning CCE Namespace Permissions

You can assign only common operation permissions on CCE cluster resources to the ServiceStage user group using IAM, excluding the namespace permissions of the clusters with Kubernetes RBAC authentication enabled. Therefore, assign the namespace permissions to the clusters separately.

For details about how to set CCE namespace permissions, see Permissions Management.

Assigning CTS Permissions

After the permissions are assigned for ServiceStage using IAM, they do not take effect for the CTS service on which ServiceStage depends. Therefore, assign the CTS service permissions separately.