Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-8131

[Network] Configure gateway selector extractor to enable fine-grained AuthZ

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • Logging 6.4.z
    • Log Storage
    • None
    • Product / Portfolio Work
    • 1
    • False
    • Hide

      None

      Show
      None
    • False
    • Not Selected
    • NEW
    • NEW
    • The LokiStack tenant openshift-network now correctly enforces fine-grained authorization
    • Enhancement
    • Logging - Sprint 281

      .h2 Context

      In the openshift-network tenant we never configured the gateway selector extractor flag that allows the gateway to extract from queries the selector that OPA will use to enforce fine-grained AuthZ. In https://issues.redhat.com/browse/LOG-7826 while trying to help the netobserv team to implement fine-grained AuthZ we realised this.

      Acceptance criteria

      • Configure gateway selector extractor to enable fine-grained AuthZ for the openshift-network tenant.

              jmarcal@redhat.com Joao Marcal
              jmarcal@redhat.com Joao Marcal
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: