Let's simplify things for now and only require two roles for worker: compute:read and compute:write.
A worker role might be re-introduced in the future, with a more granular functionality: the holder of that role will be able to create a temporary service account which will be tied to a specific worker. This way we'll be able to do more granular checks since we'll know which working is interacting with the API.
Let's simplify things for now and only require two roles for worker:
compute:readandcompute:write.A
workerrole might be re-introduced in the future, with a more granular functionality: the holder of that role will be able to create a temporary service account which will be tied to a specific worker. This way we'll be able to do more granular checks since we'll know which working is interacting with the API.See https://github.com/cirruslabs/orchard/issues/54.