search

freiheit-com / kuberpult

Kuberpult helps you manage different versions of different microservices in different cluster.
MIT License
39 stars 11 forks source link

[rbac] feature request: Support teams in RBAC policies #1626

Open jdvgh opened 4 months ago

jdvgh commented 4 months ago

Hi, currently there is only support for setting permissions on environment-group, environment or application level. However, it is not possible to set permissions on a team level. We can circumvent it by just creating rules for every application in a team, however by this we would've to also adapt the RBAC rules, when adding new apps to a team.

In the rbac.go the team is already passed. However, it is currently missing in the policy permission definition for now: permission. Additionally it would also have to be added to the .csv and its parsing.

sven-urbanski-freiheit-com commented 4 months ago

That would be nice indeed to minimize the configuration effort. We don't have concrete plans right now, but I'm sure we'll add it eventually.