[ENH] - Parse and load keycloak roles into conda-store #2433
Labels
area: integration/conda-store
area: integration/keycloak
type: enhancement 💅🏼
New feature or request
Milestone
Feature description
After the issue #2308 is implemented, we will have access to groups and roles from keycloak in JupyterHub. Next we need to parse the role attributes and load them into Conda-Store, so that they are in affect.
Consider the following keycloak role:
Role: write-access-conda-pycon-namespace-role
write:conda-store!namespace=pycon
The scopes should be parsed and the equivalent should be added into conda-store such that when this role is attached to a user or group, they should have write access to pycon (for instance) namespace.
This feature is part implementation of RFD: nebari-dev/governance#47
Value and/or benefit
This will allow us to do fine-grained permissions on Conda-Store, which can be controlled from keycloak.
Anything else?
No response
The text was updated successfully, but these errors were encountered: