RBAC Aggregation

ClusterRoles can aggregate. The pattern.

Idea

AggregationRule combines other ClusterRoles.

Single binding; multiple roles.

Use

Custom 'admin' role aggregates multiple controllers' admin roles.

Operators add their permissions automatically.

Test

Aggregated roles can grow unexpectedly.

Audit; verify scope.