Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Built-in roles for Azure Service Operator #2051

Open
sakthi-vetrivel opened this issue Jan 25, 2022 · 8 comments
Open

Feature: Built-in roles for Azure Service Operator #2051

sakthi-vetrivel opened this issue Jan 25, 2022 · 8 comments

Comments

@sakthi-vetrivel
Copy link

Today, the Azure Service Operator treats all requests from all users the same. To avoid accidental changes to resources, operators should be able to define different users and roles to use with Azure Service Operator. This will result in users being able to update resources through ASO in a way that's consistent with their permissions in other Azure entry points (CLI, Portal, etc).

@matthchr
Copy link
Member

We should be able to do this with Kubernetes RBAC. We just need to define what roles are interesting. Do we want one per CRD type (I think we can Kubebuilder that). Or do we want some overarching ones? What are they though?

@matthchr
Copy link
Member

matthchr commented Mar 8, 2022

This is 50% documentation and 50% us defining roles.

@matthchr
Copy link
Member

We'll leave this issue open but interested in user scenarios/need before we implement it probably.

@matthchr
Copy link
Member

matthchr commented Mar 7, 2023

No status change from above.

@matthchr
Copy link
Member

We still want this - no major status change from above.

@matthchr
Copy link
Member

No changes from above

@theunrepentantgeek theunrepentantgeek modified the milestones: v2.6.0, v2.7.0 Dec 11, 2023
@matthchr matthchr removed this from the v2.7.0 milestone Feb 22, 2024
@matthchr
Copy link
Member

Still sorta interested in this but there really hasn't been much user clamor for it.

@theunrepentantgeek
Copy link
Member

Still interested.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Development

No branches or pull requests

3 participants