Skip to content

Add authz & cluster anchor#428

Merged
mjudeikis merged 2 commits into
kbind-dev:mainfrom
mjudeikis:part3.authz
Dec 23, 2025
Merged

Add authz & cluster anchor#428
mjudeikis merged 2 commits into
kbind-dev:mainfrom
mjudeikis:part3.authz

Conversation

@mjudeikis

@mjudeikis mjudeikis commented Dec 22, 2025

Copy link
Copy Markdown
Contributor

Summary

What Type of PR Is This?

Add object Kind: Cluster in the provider cluster to anchor for reconciler-based configuration
Add authz permissions (bind)
Add allowedUsers, allowedGroups
Add default configuration for embedded user

/kind api-change

Related Issue(s)

Fixes #

Release Notes

Add bind permission & enhance rbac security for individual clusters

@mjudeikis mjudeikis changed the title Add authz & cluster anker Add authz & cluster anchor Dec 22, 2025
Signed-off-by: Mangirdas Judeikis <mangirdas@judeikis.lt>
On-behalf-of: @SAP mangirdas.judeikis@sap.com
@mjudeikis mjudeikis marked this pull request as ready for review December 22, 2025 10:07
@mjudeikis mjudeikis requested a review from a team as a code owner December 22, 2025 10:07
Comment thread backend/controllers/cluster/cluster_controller.go
Comment thread backend/kubernetes/manager.go Outdated
Comment thread backend/kubernetes/manager.go Outdated
Comment thread backend/options/oidc.go
Comment thread backend/provider/kcp/provider.go
coderabbitai[bot]
coderabbitai Bot previously approved these changes Dec 23, 2025
coderabbitai[bot]
coderabbitai Bot previously approved these changes Dec 23, 2025
Comment thread backend/provider/kcp/provider.go

@ntnn ntnn left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve
/lgtm

@mjudeikis mjudeikis merged commit 65b721c into kbind-dev:main Dec 23, 2025
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants