Profiles Engine FAQ

Q: Can I add the Profile Engine Agent to an existing cluster?

A: Yes, but it will cause a temporary cluster interruption. Version 5.4 will include the agent in the Add-on Manager.

Q: When I deploy a profile, what happens to pre-existing policies on the cluster?

A: Existing policies will have any missing verbs or bindings added. Nothing will be removed. Future releases will include the ability to add and remove verbs/bindings from existing policies.

Q: Does this work on all clusters, including EKS, AKS, and GKE?

A: No. Version 5.5 will introduce support for Add-on Manager and Profile Engine.

Q: How do Cluster RBAC Profiles differ from RBAC Settings?

A: The RBAC settings UI enables users to create and edit individual Roles, ClusterRoles, RoleBindings, and ClusterRoleBindings obects. Cluster RBAC Profiles are a templating mechanism to enable operators to manage cluster RBAC at scale using the concept of Profiles.