cluster-admin 和 admin Kubernetes ClusterRoles 的区别

Question

两个集群角色在每个 Kubernetes 集群中都是默认的，但是拥有这两个角色的目的是什么/它们之间的具体区别是什么？

Answer 1

The cluster admin has every permission on every resource on the cluster because the rule is

rules:
- apiGroups:
  - '*'
  resources:
  - '*'
  verbs:
  - '*'
- nonResourceURLs:
  - '*'
  verbs:
  - '*'

whereas for admin role the rules are such that it has almost all permission on almost all resources but its not wildcard access like cluster admin.When a new resource or a custom resource is introduced if you want to have permission for that resource to the admin you need to add that resource to the admin role's rule but for cluster admin it's not necessary because cluster admin has wildcard in the rules.