search

GSA-TTS / datagov-brokerpak-eks

Broker AWS EKS instances using the OSBAPI (eg from cloud.gov)
Other
9 stars 7 forks source link

Allow namespace admins to also list namespaces #63

Closed mogul closed 2 years ago

mogul commented 2 years ago

I'm changing the Solr broker so that namespace listing isn't required for it to do its thing, but it's a relatively harmless permission to grant to bindings that make help with debugging once we support multiple namespaces.

mogul commented 2 years ago

This is fixing a non-problem... Using the broker correctly, namespace-admin service accounts can list their own namespace. It's only the default service account that can't.