GSA-TTS / datagov-brokerpak-eks

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)
Other
9 stars 7 forks source link

Binding should create a namespace with service account #5

Closed mogul closed 3 years ago

mogul commented 3 years ago

In order to follow the principle of least privilege, security folks want bindings to an EKS service instance to return a service account restricted to a single namespace.

A Fargate profile referring to the corresponding namespace will have to be created during the binding process.