-
Notifications
You must be signed in to change notification settings - Fork 5.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add whitelisted namespaced resources support #2900
Labels
Comments
I would like to raise a PR for this. This is a much needed feature |
5 tasks
5 tasks
Implemented by #3314 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Summary
Support whitelisted namespaces resources instead of supporting blacklisted namespaced resources
Motivation
I think it's harder to maintain a blacklist than a whitelist here. With a blacklist, whenever people add CRDs, they will have to remember to update the blacklist to explicitly deny access the new resources. With a whilelist, we define a list of known resources.
The model is similar to grant user access with deny all as the default when we grant more access based on needed which is a basically a "whiltelist" model.
Proposal
See #Motivation
The text was updated successfully, but these errors were encountered: