{
  "kubernetes_admin": "role:kubernetes_admin and domain_name:ccadmin",
  "kubernetes_user": "(role:kubernetes_member or role:kubernetes_admin) and domain_name:ccadmin",
  "kubernetes_cloud_admin": "domain_name:ccadmin and project_name:cloud_admin",

  "GetOpenstackMetadata": "rule:kubernetes_admin",
  "ListClusters": "rule:kubernetes_user",
  "CreateCluster": "rule:kubernetes_admin",
  "ShowCluster": "rule:kubernetes_user",
  "TerminateCluster": "rule:kubernetes_admin",
  "UpdateCluster": "rule:kubernetes_admin",
  "GetClusterCredentials": "rule:kubernetes_user",
  "GetClusterEvents": "rule:kubernetes_user",
  "GetClusterInfo": "rule:kubernetes_user",
  "GetBootstrapConfig": "rule:kubernetes_admin",
  "GetClusterValues": "rule:kubernetes_cloud_admin"
}

{
  "kubernetes_admin": "role:kubernetes_admin and (domain_name:ccadmin or domain_name:Default)",
  "kubernetes_user": "(role:kubernetes_member or role:kubernetes_admin) and (domain_name:ccadmin or domain_name:Default)",
  "kubernetes_cloud_admin": "domain_name:ccadmin and project_name:cloud_admin",

  "GetOpenstackMetadata": "rule:kubernetes_admin",
  "ListClusters": "rule:kubernetes_user",
  "CreateCluster": "rule:kubernetes_admin",
  "ShowCluster": "rule:kubernetes_user",
  "TerminateCluster": "rule:kubernetes_admin",
  "UpdateCluster": "rule:kubernetes_admin",
  "GetClusterCredentials": "rule:kubernetes_user",
  "GetClusterEvents": "rule:kubernetes_user",
  "GetClusterInfo": "rule:kubernetes_user",
  "GetBootstrapConfig": "rule:kubernetes_admin",
  "GetClusterValues": "rule:kubernetes_cloud_admin"
}

Allow users from Default domain in ccadmin policy
Allow users from Default domain in ccadmin policy
