Add CRDs as a kubernetes_resource in RBAC

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.

https://goteleport.com

GNU Affero General Public License v3.0

17.33k stars 1.74k forks source link

Open pschisa opened 9 months ago

pschisa commented 9 months ago

What would you like Teleport to do? Add CRDs as a available resource for the kubernetes_resource section of the Teleport roles

This allows users to restrict CRD access via Teleport RBAC directly rather than on the kubernetes group/user

philip-teleport commented 7 months ago

+1 from a prospect

4durban commented 5 months ago

Sorry for bothering but do you have this on roadmap?

We are quite interested in this functionality too, having to split the RBAC between K8S and Teleport is quite annoying.

Thank you!