Limit visibility of <Pool>.Status.Capacity / Allocatable
#813
Labels
enhancement
New feature or request
<Pool>.Status.Capacity / Allocatable
#813
Summary
Currently, each user that can
get
/list
a pool can see itsStatus.Capacity
/Status.Allocatable
.Since this is potentially confidential information, we should enable hiding the field for users without the
<pool>/stats
permission.Example
For a
MachinePool
, if a user doesn't have the RBACmachinepools/stats
permission, the machine pool status should not includeCapacity
/Allocatable
. If the user has this permission, the fields should be included.The text was updated successfully, but these errors were encountered: