Questions tagged [role-based-access-control]
The role-based-access-control tag has no usage guidance.
11 questions
0
votes
0
answers
15
views
Is there a best practice around sharing a role with multiple namespaces or services?
I noticed that in our cluster, we have dozens of roles which are identical if you ignore unique fields like creationTimestamp, uid, resourcesVersion, labels, name and namespace:
The following will ...
- 101
-1
votes
1
answer
2k
views
HashiCorp Vault roles
It's quite easy to create roles for policies and also list them in HashiCorp Vault:
vault write auth/jwt/role/myrolename ...
...
list auth/jwt/role
However, I can't find anything regarding how to ...
- 6,782
5
votes
1
answer
4k
views
Cannot configure node group in new EKS cluster due to no Node IAM role found
I've created a new EKS cluster, and am trying to add a new node group to it.
I'm stuck on selecting a Node IAM Role from the dropdown.
I followed the link, and created all options for roles I could ...
- 153
1
vote
1
answer
563
views
RBAC to secure Azure Table Storage access
I want to limit my user assigned MSI to be able to read and write tables only in a storage account. When assigning roles on IAM blade in the portal I don't see any table related roles. Why is that? I ...
- 111
1
vote
1
answer
86
views
Is it possible to set role in FreeIPA to use for applications as Jenkins, Github?
LDAP in FreeIPA, it can create groups, roles and set permissions. Applications such as Jenkins, Github also has roles feature.
2 questions:
Can roles feature be used in every application? (At least ...
- 113
3
votes
1
answer
2k
views
kubernetes: how to set "top node" and "top pod" permissions?
Hoping for some pointers, I have a question: what role/permissions do I need to bind to a user that has ClusterRole=view in order to let that user use top node and top pod commands in kubectl?
My ...
- 61
1
vote
1
answer
67
views
How to grant all resources in an AWS account the ability to assume role?
I have an organization with a master account (account A) and a second account (account B).
I want to create a role so all instances in account B will have read permission from everything in account A.
...
- 11
1
vote
1
answer
81
views
How to share RDS snapshots across account roles?
I'm using an AWS account which has different roles for the different environments we use. For example, we have a Development role for our development environment and a Production role for our ...
- 111
1
vote
2
answers
348
views
How to mange data access in a CICD pipeline for multiple users with different permissions
TLDR Question;
Is it possible to setup a CICD pipeline so that it executes with the permissions of the user who triggered the build? If so which tools support this?
Full Question;
Apologies if this ...
- 111
0
votes
2
answers
393
views
What is the most common server permission policy for web application deployment?
I have a server with Ubuntu with a web server (Apache or Nginx) running a PHP application. The application consists of the following parts:
An executable code that handles HTTP requests (say in the /...
- 101
2
votes
1
answer
42
views
Do not show all docker containers to a particular user
I want to use one server to host multiple docker-containers. I want to give another user a possibility to manage new docker-containers, but I do not want to give him access to all other containers, ...
- 121