Azure / azure-service-operator

Azure Service Operator allows you to create Azure resources using kubectl
https://azure.github.io/azure-service-operator/
MIT License
741 stars 196 forks source link

Provide example gatekeeper policies #1188

Open mkosieradzki opened 4 years ago

mkosieradzki commented 4 years ago

It would be great for multi-tenant clusters to have example (and supported) gatekeeper policies that enable namespace-based ownership of the resources, e.g. you can only access resources from Resource Groups with names dervived from your namespace using some conventions.

This is an alternative approach to: #1173

stale[bot] commented 4 years ago

This issue has been automatically marked as stale because it has not had activity in 60 days. It will be closed if no further activity occurs. Thank you!

lwindolf commented 3 years ago

I also consider this quite important to use the operator in a somewhat secure manner. Even with #1173 I might want to have gatekeeper rules just to uncover configuration mistakes.

stale[bot] commented 3 years ago

Issue still active.

matthchr commented 2 years ago

This is still something we're tracking to do

matthchr commented 1 year ago

We're still interested in doing this

theunrepentantgeek commented 1 year ago

We're still interested in this.

matthchr commented 11 months ago

We still are interested in doing this

matthchr commented 7 months ago

Still interested in doing this. We would also be willing to accept contributions from the community if they have sample policies that they're already using in production.

theunrepentantgeek commented 1 month ago

No change from the above.