Question about configuring policy per user vs. cluster

openfaas / openfaas-cloud

The Multi-user OpenFaaS Platform

https://docs.openfaas.com/openfaas-cloud/intro/

MIT License

770 stars 228 forks source link

Question about configuring policy per user vs. cluster #563

Open brandonkal opened 4 years ago

brandonkal commented 4 years ago

Expected Behaviour

Currently dockerfile functions are allowed universally in the cluster or not. It would be nice to be able to share a cloud while forcing most users to use one of the cluster-approved templates.

Current Behaviour

It's either enabled or not.

Possible Solution

Add a new option "acl". If set, check if the username in the CUSTOMERS file has " dockerfile" listed:

admin-username dockerfile
squire

This solution keeps things simple.

alexellis commented 4 years ago

Can you tell us more about your usecase?

alexellis commented 4 years ago

/set title: Question about configuring policy per user vs. cluster

brandonkal commented 4 years ago

Sure. I would like to deploy an OpenFaaS cloud cluster where only "admin" users can use the dockerfile template. This allows the admin user to experiment with other workloads while keeping the cluster a little more locked down for standard users to encourage the use of templates.