Uploaded image for project: 'OpenShift Monitoring'
  1. OpenShift Monitoring
  2. MON-1679

use static authorizer feature of kube-rbac-proxy

    XMLWordPrintable

Details

    • False
    • False
    • NEW
    • NEW
    • Undefined
    • Monitoring - Sprint 205, Monitoring - Sprint 206, Monitoring - Sprint 207, Monitoring - Sprint 208, Monitoring - Sprint 209

    Description

      The static authorizer feature has landed in upstream kube-rbac-proxy. Lets use it by configuring a static authorizer for all requests that hit a /metrics endpoint.

      DoD:

      • Downstream kube-rbac-proxy is synced.
      • All CMO operands are configured with static authorization.
      • Bugzillas created for all non-monitoring components using kube-rbac-proxy for metrics authn/authz.

      Attachments

        Issue Links

          Activity

            Public project attachment banner

              context keys: [headless, issue, helper, isAsynchronousRequest, project, action, user]
              current Project key: MON

              People

                pnair2 Prashant Balachandran (Inactive)
                jfajersk@redhat.com Jan Fajerski
                Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: