Documenting Needs for Fine Grain Access OBS

[schwesig]

Title: Documenting Needs for Fine Grain Access OBS

We're setting up access to our Observability cluster and need to tailor it for various users, including Professors, Students, Accounting, Class and NERC Admins, RH Contributors, Accountants for IRS, and Security Officers. Each group requires different levels of access to metrics and logs.

Objective:

Create a document explaining the why and the how about unique access needs for different users.

Key Points:

• Why Different Access?: Clarify why each user type needs specific access.
• Why Reduced/Controlled Access?: Clarify why each user type needs specific access.
• Benefits: Outline how this approach enhances security, compliance, and efficiency.
• Implementation Ideas: Suggest how we can set it up.

Implementation Ideas

• https://github.com/nerc-project/operations/issues/493

[schwesig]

• https://github.com/nerc-images/keycloak-permissions-operator
• https://github.com/OCP-on-NERC/prom-keycloak-proxy

[schwesig]

see PR for code/status https://github.com/OCP-on-NERC/docs/pull/63