Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

provide built-in ClusterRoles when installing educates #525

Open
djschny opened this issue Aug 2, 2024 · 1 comment
Open

provide built-in ClusterRoles when installing educates #525

djschny opened this issue Aug 2, 2024 · 1 comment
Labels
area/installer Issues that have any relation with the installation scripts enhancement New feature or request

Comments

@djschny
Copy link
Contributor

djschny commented Aug 2, 2024

Is your feature request related to a problem? Please describe.

When providing access to an Educates cluster where there are multiple people working, it is necessary to provide selective access. This currently requires manually creating ClusterRoles for the various Educates CRDs, as opposed to being able to reference a set of common ones.

Describe the solution you'd like

Educates to provide and install a set of common/default ClusterRoles. For example:

  • educates-admin
  • educates-operator
  • educates-author
  • educates-view

Each one would provide different levels of access, read vs write, etc. Users could then provide tooling around these standard ones and reduce the amount of custom ClusterRoles created individually by everyone.

Describe alternatives you've considered

Each user creating the same or similar ClusterRoles

Additional information

No response

@djschny djschny added the enhancement New feature or request label Aug 2, 2024
@jorgemoralespou jorgemoralespou added the area/installer Issues that have any relation with the installation scripts label Aug 2, 2024
@jorgemoralespou
Copy link
Contributor

We should consider using aggregated clusterroles
Also, we should consider if we need to augment default user facing roles, these are admin, edit and view
Finally, we should also consider to group clusterroles and clusterrolebindings with educates: prefix

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/installer Issues that have any relation with the installation scripts enhancement New feature or request
Projects
Development

No branches or pull requests

2 participants