Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RBAC in the KGO chart should differentiate between EE and OSS. #115

Open
1 task
tao12345666333 opened this issue Mar 13, 2024 · 0 comments
Open
1 task
Labels
area/maintenance migrated-from-archive Issues migrated from the archived KGO repository

Comments

@tao12345666333
Copy link
Member

tao12345666333 commented Mar 13, 2024

Problem Statement

The EE role is a superset of OSS RBAC rules.
Directly using EE's RBAC in Helm Chart.

Proposed Solution

  • Add a conditional statement in the RBAC rules of Chart? Determine whether it is OSS or EE based on the image repository used. from @tao12345666333
  • we'd use an up to date role with minimum permissions (so have 2 roles in the chart and use an appropriate for the image chosen) but that's more work. from @pmalek

Additional Information

discussion https://kongstrong.slack.com/archives/C011RQPHDC7/p1710349413178909

Acceptance Criteria

  • The installed RBAC rules should not contain unnecessary content.
@mlavacca mlavacca added the migrated-from-archive Issues migrated from the archived KGO repository label Apr 19, 2024
@czeslavo czeslavo transferred this issue from another repository Apr 22, 2024
@czeslavo czeslavo transferred this issue from another repository Apr 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/maintenance migrated-from-archive Issues migrated from the archived KGO repository
Projects
None yet
Development

No branches or pull requests

2 participants