Red Hat Summit 红帽全球峰会支持控制台（Console）开发人员开始试用联系人

1.2. 启用 Red Hat Edge Manager

技术预览： 使 Red Hat Edge Manager 能够大规模管理边缘设备和应用程序。

需要的访问权限：集群管理员

1.2.1. 先决条件
复制链接

  • 您需要一个 Red Hat Advanced Cluster Management hub 集群。请参阅 安装和升级。

对 MultiClusterHub 资源进行补丁，然后验证是否启用了 Red Hat Edge Manager。完成以下步骤：

  1. 运行以下命令，在 Multiclusterhub 资源中的 spec.overrides.components 的 edge-manager-preview 条目中将 enabled 字段设置为 true ： 

    oc patch multiclusterhubs.operator.open-cluster-management.io multiclusterhub -n rhacm --type json --patch '[{"op": "add", "path":"/spec/overrides/components/-", "value": {"name":"edge-manager-preview","enabled": true}}]'

  2. 在 hub 集群中运行以下命令来验证 Red Hat Edge Manager 是否已启用： 

    oc -n open-cluster-management get pods | grep flightctl-api

    请参见以下示例输出： 

    flightctl-api                    2/2     Running   0             43s

1.2.3. 启用 Red Hat Edge Manager 控制台
复制链接

在 OpenShift Container Platform web 控制台中启用 Red Hat Edge Manager。完成以下步骤：

  1. 运行以下命令打开控制台进行编辑： 

    oc edit console.v1.operator.openshift.io
  2. 通过在 spec.plugins 部分添加 flightctl-plugin 来启用 Red Hat Edge Manager 控制台。

1.2.4. Red Hat Edge Manager 授权
复制链接

技术预览： Red Hat Edge Manager Kubernetes 授权使用基于角色的访问控制(RBAC)来控制 Red Hat Edge Manager API 端点的授权。

您可以使用 open-cluster-management 命名空间中的以下角色设置 Kubernetes RBAC 授权：

  • 命名空间范围的授权的 Role 和 RoleBinding
  • 用于集群范围的授权的 ClusterRole 和 ClusterRoleBinding

您可以使用 Role 或 ClusterRole API 对象来定义特定角色允许的 API 资源和操作动词。

RoleBinding 或 ClusterRoleBinding API 对象向一个或多个用户授予角色中定义的权限。

如需更多信息，请参阅基于角色的访问控制。

1.2.4.1. Red Hat Edge Manager RBAC 角色
复制链接

Red Hat Edge Manager 有以下默认角色及其权限：

Expand

角色

权限

Resources

flightctl-admin

All

All

flightctl-viewer

获取,list

设备,fleets,resourcesyncs

flightctl-operator

获取,list,create,delete,update,patch

设备,fleets,resourcesyncs

get

devices/console

获取,list

仓库,fleets,templateversions

flightctl-installer

获取,list

enrollmentrequests

POST

enrollmentrequests/approval

获取,list,create

certificatesigningrequests

1.2.4.2. Red Hat Edge Manager 授权资源
复制链接

下表包含 Red Hat Edge Manager API 端点的路由、名称、资源名称和操作动词：

Expand

Route

Name

资源

Verb

DELETE /api/v1/certificatesigningrequests

DeleteCertificateSigningRequests

certificatesigningrequests

deletecollection

GET /api/v1/certificatesigningrequests

ListCertificateSigningRequests

certificatesigningrequests

list

POST /api/v1/certificatesigningrequests

CreateCertificateSigningRequest

certificatesigningrequests

create

DELETE /api/v1/certificatesigningrequests/{name}

DeleteCertificateSigningRequest

certificatesigningrequests

delete

GET /api/v1/certificatesigningrequests/{name}

ReadCertificateSigningRequest

certificatesigningrequests

get

PATCH /api/v1/certificatesigningrequests/{name}

PatchCertificateSigningRequest

certificatesigningrequests

patch

PUT /api/v1/certificatesigningrequests/{name}

ReplaceCertificateSigningRequest

certificatesigningrequests

update

DELETE /api/v1/certificatesigningrequests/{name}/approval

DenyCertificateSigningRequest

certificatesigningrequests/approval

delete

POST /api/v1/devices

CreateDevice

devices

create

GET /api/v1/devices

ListDevices

devices

list

DELETE /api/v1/devices

DeleteDevices

devices

deletecollection

GET /api/v1/devices/{name}

ReadDevice

devices

get

PUT /api/v1/devices/{name}

replaceDevice

devices

update

DELETE /api/v1/devices/{name}

DeleteDevice

devices

delete

GET /api/v1/devices/{name}/status

ReadDeviceStatus

devices/status

get

PUT /api/v1/devices/{name}/status

ReplaceDeviceStatus

devices/status

update

GET /api/v1/devices/{name}/rendered

GetRenderedDevice

devices/rendered

get

PUT /api/v1/devices/{name}/decommission

DecommissionDevice

devices/decommission

update

GET /ws/v1/devices/{name}/console

DeviceConsole

devices/console

get

POST /api/v1/enrollmentrequests

CreateEnrollmentRequest

enrollmentrequests

create

GET /api/v1/enrollmentrequests

ListEnrollmentRequests

enrollmentrequests

list

DELETE /api/v1/enrollmentrequests

DeleteEnrollmentRequests

enrollmentrequests

deletecollection

GET /api/v1/enrollmentrequests/{name}

ReadEnrollmentRequest

enrollmentrequests

get

PUT /api/v1/enrollmentrequests/{name}

ReplaceEnrollmentRequest

enrollmentrequests

update

PATCH /api/v1/enrollmentrequests/{name}

PatchEnrollmentRequest

enrollmentrequests

patch

DELETE /api/v1/enrollmentrequests/{name}

DeleteEnrollmentRequest

enrollmentrequests

delete

GET /api/v1/enrollmentrequests/{name}/status

ReadEnrollmentRequestStatus

enrollmentrequests/status

get

POST /api/v1/enrollmentrequests/{name}/approval

ApproveEnrollmentRequest

enrollmentrequests/approval

POST

PUT /api/v1/enrollmentrequests/{name}/status

ReplaceEnrollmentRequestStatus

enrollmentrequests/status

update

POST /api/v1/fleets

CreateFleet

fleets

create

GET /api/v1/fleets

ListFleets

fleets

list

DELETE /api/v1/fleets

DeleteFleets

fleets

deletecollection

GET /api/v1/fleets/{name}

ReadFleet

fleets

get

PUT /api/v1/fleets/{name}

ReplaceFleet

fleets

update

DELETE /api/v1/fleets/{name}

DeleteFleet

fleets

delete

GET /api/v1/fleets/{name}/status

ReadFleetStatus

fleets/status

get

PUT /api/v1/fleets/{name}/status

ReplaceFleetStatus

fleets/status

update

POST /api/v1/repositories

CreateRepository

软件仓库

create

GET /api/v1/repositories

ListRepositories

软件仓库

list

DELETE /api/v1/repositories

DeleteRepositories

软件仓库

deletecollection

PUT /api/v1/repositories/{name}

replaceRepository

软件仓库

update

DELETE /api/v1/repositories/{name}

deleteRepository

软件仓库

delete

POST /api/v1/resourcesyncs

CreateResourceSync

resourcesyncs

create

GET /api/v1/resourcesyncs

ListResourceSync

resourcesyncs

list

DELETE /api/v1/resourcesyncs

DeleteResourceSyncs

resourcesyncs

deletecollection

GET /api/v1/resourcesyncs/{name}

ReadResourceSync

resourcesyncs

get

PUT /api/v1/resourcesyncs/{name}

ReplaceResourceSync

resourcesyncs

update

DELETE /api/v1/resourcesyncs/{name}

DeleteResourceSync

resourcesyncs

delete

GET /api/v1/fleets/{fleet}/templateVersions

ListTemplateVersions

fleets/templateversions

list

DELETE /api/v1/fleets/{fleet}/templateVersions

DeleteTemplateVersions

fleets/templateversions

deletecollection

GET /api/v1/fleets/{fleet}/templateVersions/{name}

ReadTemplateVersion

fleets/templateversions

get

DELETE /api/v1/fleets/{fleet}/templateVersions/{name}

DeleteTemplateVersion

fleets/templateversions

delete

Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

关于红帽文档

通过我们的产品和服务，以及可以信赖的内容，帮助红帽用户创新并实现他们的目标。 了解我们当前的更新.

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情，请参阅红帽博客.

關於紅帽

我们提供强化的解决方案，使企业能够更轻松地跨平台和环境（从核心数据中心到网络边缘）工作。

Theme

© 2026 Red Hat返回顶部