Enable access and view cluster resources by namespace

---

This page explains how to restrict view access to cluster resources based on specific namespaces, and how users with restricted access can view these resources on the Google Cloud console. This scenario is common for organizations that run multi-tenant Google Kubernetes Engine (GKE) clusters.

This page is for Security specialists and Operators who want to provide users with restricted access to cluster resources for specific namespaces. To learn more about common roles and example tasks that we reference in Google Cloud content, see Common GKE user roles and tasks .

Before reading this page, ensure that you're familiar with the following namespace concepts:

• Organizing Kubernetes with Namespaces
• Enterprise multi-tenancy best practices

Enable namespace-restricted access to cluster resources

You can use tenant permissions to restrict user interactions with the cluster on the Google Cloud console. You grant users the roles/container.clusterViewer IAM permission as well as role-based access control (RBAC) permissions to view resources in specific namespaces.

To learn more about using namespaces, see Organizing Kubernetes with Namespaces and Enterprise multi-tenancy best practices .

View namespace-restricted resources in the Google Cloud console

If you have limited IAM or RBAC permissions and want to view namespace-restricted resources on the Google Cloud console, follow these steps:

1. Go to the Workloadspage in the Google Cloud console.

   Go to Workloads

2. Click the Namespacedrop-down list.

3. Click add Add filter.

4. Enter the namespace you want to access, then click Save.

5. Click OK.

The list will be filtered to show the selected namespace.

Share saved views

You can also save the filtered list as a named saved view . The saved view will persist across sessions, and can be shared with other users.

To share a saved view, follow these steps:

1. Select the saved view from the Saved viewdrop-down list.
2. Next to the Saved viewdrop-down list, click more_vert , then click Share.
3. Click content_copy to copy the URL in the Share viewdialog. You can share this URL with other users who need access to the same cluster and namespaces.