Add support for pod/exec rbac

kubeguard / guard

🔑 Kubernetes Authentication & Authorization WebHook Server

https://kubeguard.dev

Apache License 2.0

591 stars 81 forks source link

Add support for pod/exec rbac #325

Closed Anumita closed 3 years ago

Anumita commented 3 years ago

For pod/exec action, kube-apiserver sends two sar requests, one for pods/read and then for pods/exec/create. With this change, user will be able to only give/block exec into a pod.

Also added log line to make sure we know when a SAR request comes to guard. We are logging the request body here

Anumita commented 3 years ago

@tamalsaha could you please release the image containing this commit? We can release the image on our side only if it has the same tag as the image released here😅

tamalsaha commented 3 years ago

Done! https://github.com/kubeguard/guard/releases/tag/v0.8.0

Anumita commented 3 years ago

Done! https://github.com/kubeguard/guard/releases/tag/v0.8.0

Thanks a lot!