search

Dynatrace / dynatrace-operator

Automate Kubernetes observability with Dynatrace
https://www.dynatrace.com
Apache License 2.0
167 stars 136 forks source link

Unable to opt-out of `DataExport` token scope #3531

Open fradaschin opened 2 months ago

fradaschin commented 2 months ago

Is your feature request related to a problem? Please describe. Our customers are trying to update the Dynatrace-operator and they are receiving the following message: token 'apiToken' is missing the following scopes: [ DataExport ]

We are a Service Provider for Dynatrace and cannot hand over tokens with all the permissions specified in the official public documentation.

One of our colleagues has proposed this PR https://github.com/Dynatrace/dynatrace-operator/pull/670 a while ago , but we see the latest version of the code reveals this was reverted/removed.

Describe the solution you'd like Is there any possibility to add this back?

chrismuellner commented 2 months ago

This token scope is now always required since the feature flag to disable host requests was removed with v1.0.0.

We're working on additional changes to make these scopes no longer needed in the future, but we don't have an ETA at this time.

fradaschin commented 2 months ago

Hi @chrismuellner,

Thank you very much for your reply.