Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

allow ACL policies to be associated with workload identity #14140

Merged
merged 3 commits into from
Aug 22, 2022
Merged

allow ACL policies to be associated with workload identity #14140

merged 3 commits into from
Aug 22, 2022

Commits on Aug 22, 2022

  1. allow ACL policies to be associated with workload identity 

    The original design for workload identities and ACLs allows for operators to
extend the automatic capabilities of a workload by using a specially-named
policy. This has shown to be potentially unsafe because of naming collisions, so
instead we'll allow operators to explicitly attach a policy to a workload
identity.

This changeset adds workload identity fields to ACL policy objects and threads
that all the way down to the command line. It also a new secondary index to the
ACL policy table on namespace and job so that claim resolution can efficiently
query for related policies.
    @tgross
    tgross committed Aug 22, 2022
    Configuration menu
    Copy the full SHA
    df45144 View commit details
    Browse the repository at this point in the history

  2. move job attachment fields on ACLPolicy out to their own struct

    @tgross
    tgross committed Aug 22, 2022
    Configuration menu
    Copy the full SHA
    22920e1 View commit details
    Browse the repository at this point in the history

  3. reorder conditionals, tweak CLI help text

    @tgross
    tgross committed Aug 22, 2022
    Configuration menu
    Copy the full SHA
    c5a6700 View commit details
    Browse the repository at this point in the history